Hacker Returns 185 ETH to Kame Aggregator After Sei Exploit

Kame Aggregator, a decentralized exchange aggregator on the Sei network, confirmed it recovered part of the funds stolen in a security breach earlier today. The platform said it negotiated with the attacker, securing 185 ETH returned through an Ethereum transaction.

Critical Update!
We have successfully communicated with hackers and they accepted our offer to transfer funds back.
185 ETH has been refunded by this transationhttps://t.co/SFWD6JJV7K
We are collecting information about affected hackers and will soon inform the compensate plan.…

— Kame Aggregator (@kame_agg) September 13, 2025

Breach Contained as Users Acted Quickly

The exploit was first flagged when Kame spotted suspicious activity and urged users to revoke token approvals. The alert limited damage as many users cut off wallet permissions in time.

The team later acknowledged the breach and began working with partners across the Sei network to track stolen assets and identify affected accounts.

Attacker Returns Funds After Talks

Kame established direct communication with the attacker soon after the breach. By late session, the project reported 185 ETH transferred back into a recovery wallet. While the exact size of the exploit hasn’t been disclosed, the platform said a full review is underway to determine the total losses.

The team confirmed it is designing a compensation plan for impacted users. The framework will be published after investigators finish auditing wallet data. Until then, users are advised to keep token approvals disabled and wait for updated security protocols.

The team also noted that the compensation plan is intended to mitigate losses and that the return of funds was achieved with assistance from partners across the Sei community.

The recovery of funds occurred as Ethereum posted a gain in trading. The token rose from $4,500 to $4,719 within a day, marking a 5% increase despite a slight monthly decline.

Over the past week, Ethereum has gained 11%, reflecting wider market activity that coincided with the timing of the exploit and subsequent recovery.

Source