Gelato Recovery

I created a flashbots bundle to recover $44K worth of unclaimed Gelato ICO tokens from a compromised wallet. This is the source code to this Twitter thread.

The Problem

The compromised wallet has had it's private key leaked, a malicoius individual set up a bot to monitor for incoming transactions and to steal tokens as soon as they are deposited to the compromised address.
To claim the ICO airdrop the compromised wallet needs to be seeded with enough ETH to pay for the gas fees (without the bots stealing the ETH as soon as it is deposited).

The solution is to send transactions to seed + claim + withdraw all in the same block. We can do this by sending these bundled transaction to flashbot minters using the ethers-provider-flashbots-bundle package.

Transactions

Send funds from funding_wallet to compromised_wallet to cover gas for claiming + transfering
Claim Gelato ICO tokens from compromised_wallet
Transfer claimed Gelato tokens from compromised_wallet to ledger_wallet
Transfer all unused ETH from compromised_wallet to funding_wallet

Proof Of Transactions

The transactions can be seen bundled together in block 14488296

Transaction Hashes

Transaction	Hash
Funding `compomised_wallet` using `funding_wallet`	0xdd4608...e668d5
Claiming Gelato tokens to `compromised_wallet`	0xf9676c...479c50
Withdrawing Gelato tokens from `compromised_wallet` to `ledger_wallet`	0x8d4da8...7cb7f7

Contracts/Addresses In Play