Decentralized exchange RISEx sent an on-chain message to the attacker behind the XLP vault incident after seeing funds begin to move. According to Foresight News, the team said the attacker could keep 20%, or about 134,566 USDC, if the remaining 80%, or about 538,265 USDC or equivalent ETH, is returned to its official Ethereum or Base address by September 23, and the case would be handled as a white-hat hack.

Foresight News previously reported that RISEx said on August 4 that an unauthorized withdrawal occurred in its XLP vault-related RWA strategy, affecting 673,011.56 USDC.