A hacker tied to the Trusted Volumes exploit has returned 1,122 ETH to the protocol, closing part of a security incident that began with a multi-million-dollar exploit earlier this year.

The on-chain recovery is unusual because the attacker did not return everything. Instead, the wallet linked to the exploit sent back roughly $2 million worth of ETH while retaining another large amount as what now looks like a de facto bounty. That kind of outcome is familiar in DeFi, where projects sometimes negotiate with attackers after an exploit rather than risk losing the full amount forever.

The returned funds matter because they reduce the damage for the protocol and its users. But the structure of the settlement also shows how messy DeFi security remains. When smart contracts fail, the market often ends up relying on public pressure, wallet tracking, and informal negotiation rather than a clean legal process.

Reference: Etherscan

TL;DR

• The Trusted Volumes attacker returned 1,122 ETH to the protocol inventory.
• The exploit originally drained about $5.9 million through a smart contract vulnerability.
• The attacker appears to have retained roughly $2 million as a bounty-style settlement.

What Happened With Trusted Volumes?

The exploit traces back to a vulnerability in Trusted Volumes’ RFQ swap proxy. According to the on-chain evidence, the May 7 attack drained approximately $5.9 million in assets through a signature-check bypass.

That is the kind of vulnerability that can be especially damaging in DeFi because it sits close to the execution layer of a protocol. If a swap proxy accepts an invalid or improperly checked instruction, an attacker may be able to move funds in a way the system was never meant to allow.

The important update now is the return of 1,122 ETH from the attacker wallet to protocol inventory. The primary source for the story is the wallet and transaction evidence on Etherscan, which shows the recovery leg of the movement.

This does not necessarily mean the protocol has been made whole. It means a meaningful part of the exploited funds has come back.

That distinction matters. A partial recovery can be better than nothing, but it still leaves users and the wider market asking why the vulnerability existed, how quickly it was detected, and whether the protocol has made changes to prevent a repeat.

Why DeFi Exploit Settlements Keep Happening

Crypto has developed a strange pattern around major exploits.

In traditional finance, a theft usually leads to police reports, frozen accounts, and court processes. In DeFi, the first response is often public wallet tracking. The attacker’s address gets labelled. On-chain analysts follow the movement of funds. Protocol teams may publish messages offering a bounty if the money is returned.

Sometimes attackers accept. Sometimes they disappear into mixers, bridges, or exchange routes. Sometimes they return a portion and keep the rest.

That appears to be the shape of this case.

The reason this happens is simple: blockchains make funds visible, but not always recoverable. If an attacker controls the private keys, the protocol cannot simply reverse the transaction. The best practical outcome may be to offer a settlement before the funds are moved further away.

That is uncomfortable, but it is also realistic.

For users, the lesson is that code risk is not abstract. Even protocols with real activity can suffer from a small implementation flaw that becomes a major loss. For developers, the lesson is even sharper: signature validation, access controls, proxy logic, and upgrade paths need aggressive review because attackers only need one weak point.

The Recovery Helps, But It Does Not Erase The Exploit

The return of 1,122 ETH is clearly positive for Trusted Volumes, but it should not be treated as a full reset.

An exploit still happened. Funds were still removed. The attacker still appears to have kept a significant sum. The protocol still needs to show that the underlying issue has been addressed and that users can trust the system going forward.

That matters because DeFi confidence is fragile after security incidents. Users may forgive a protocol that responds quickly, communicates clearly, and recovers funds. They are less forgiving when teams stay vague, downplay the incident, or fail to explain what changed.

The strongest next step for Trusted Volumes would be a clear post-mortem: what failed, how the attacker used it, how the contract logic has been fixed, and whether any user balances remain affected.

Until then, the market can recognise the recovery without pretending the episode is over.

This is also a useful reminder for the wider sector. DeFi security is not only about preventing hacks. It is about incident response, transparency, on-chain monitoring, and whether projects can recover enough trust after something goes wrong.

Trusted Volumes got some funds back. The harder job is proving the system is safer than it was before the exploit.

This article is based on Etherscan wallet and transaction data.

This article was written by the News Desk and edited by Samuel Rae.

This report is based on information released by Etherscan. at Etherscan

The Ripple case is no longer about whether the fight exists. It is about how it ends, and how expensive that ending becomes. Ripple’s latest remedies brief pushes directly on that question, challenging the SEC’s view of what the final penalty should look like.

That is a narrower legal battle than the market was pricing in at the start of the case, but it is still important because remedies shape the final takeaway.

For more details, visit the official Ripple platform.

TL;DR

• Ripple filed a key reply brief in the remedies phase of its SEC case.
• The company argues any civil penalty should remain far below the figure sought by the SEC.
• The market focus has shifted from existential legal risk to the cost and shape of the final outcome.

The Case Has Moved Into A Different Phase

Ripple’s argument, including its stance that a civil penalty should not exceed $10 million, underlines how far the case has evolved. The debate now is less about broad market panic and more about the practical consequences of the court’s conclusions.

For XRP watchers, that changes the tone. The headline risk is no longer the same as it was when every motion seemed capable of redrawing the industry’s legal map.

Why Traders Still Care

Even so, remedies matter. They shape precedent, they influence negotiations in future cases, and they affect how the market reads the SEC’s appetite for continued pressure on large crypto firms.

So while this stage is less dramatic than the earlier courtroom battles, it still matters for Ripple, for XRP sentiment, and for the broader read-through on crypto enforcement.

This article is based on information from Ripple.

This article was written by the News Desk and edited by Samuel Rae.

This report is based on information from Ripple. at Ripple

Crypto markets have had plenty to digest today, and this development adds another layer to the picture. Ethereum Institutional Backers Launch Independent Non-Profit to Target Wall Street Wealth gives NewsBTC readers a clean angle on Ethereum at a point where the market is trying to separate durable signals from short-lived noise.

According to the source material reviewed for this report, the story turns on a few concrete details rather than vague sentiment. That matters because crypto headlines can move quickly, but the pieces that tend to last are the ones backed by filings, official releases, data dashboards, or protocol-level records.

TL;DR

• Ethereum co-founder Joseph Lubin, alongside ETH treasury firms BitMine and SharpLink, backed the launch of 'Ethereum Institutional'.
• The new group is an independent non-profit designed to serve as a 'front door' for Wall Street banks and asset managers on tokenization and stablecoins.
• This organization aims to take over business development roles from the Ethereum Foundation, which is focusing more on core research.

A Fresh Signal For The Market

The immediate relevance is that this development fits into one of the market’s main themes for the day: institutional positioning, network usage, regulatory pressure, protocol development, or asset-specific rotation. In this case, the key topic is Ethereum, which is why it deserves a dedicated read rather than being buried inside a broader market recap.

For traders, the useful part is not simply that the headline exists. It is the way the facts line up with the current market backdrop. When official sources, market data, or protocol records show a fresh shift, readers get a better sense of whether the move is just a one-day reaction or part of something more structural.

The Numbers That Matter

The core source for this story is prnewswire.com with supporting data from globenewswire.com. That source trail is important because the final article should not rely on discovery-only media links or second-hand summaries.

Ethereum co-founder Joseph Lubin, alongside ETH treasury firms BitMine and SharpLink, backed the launch of 'Ethereum Institutional'.

The new group is an independent non-profit designed to serve as a 'front door' for Wall Street banks and asset managers on tokenization and stablecoins.

This organization aims to take over business development roles from the Ethereum Foundation, which is focusing more on core research.

The numerical claims in the pack were tied back to specific source material before writing. 'July 1, 2026' sourced from Ethereum Institutional official launch release date

The Important Caveat

The caution is just as important as the headline. Do not state this is an official Ethereum Foundation spin-off; it is a separate non-profit.

That means the cleaner read is to treat this as a confirmed development with a defined scope, not as proof of a guaranteed price move or a sweeping market shift. In crypto, the difference matters. A verified data point can strengthen a thesis, but it does not remove execution risk, liquidity risk, regulatory uncertainty, or the possibility that traders fade the initial reaction.

For now, the story gives the market another piece of evidence to weigh. If follow-up filings, dashboard updates, protocol records, or official statements confirm further momentum, the angle can develop into something larger. If not, it still stands as a useful snapshot of where activity is concentrating today.

This report is based on information from prnewswire.com and globenewswire.com.

This article was written by the News Desk and edited by Samuel Rae.

Source: Globenewswire