Pando Rings hacker buys 6,243 ETH for $10M amid market dip

A wallet linked to the 2022 Pando Rings exploit just woke up from a long nap and went shopping. The address, identified as 0x303…3d9F, swapped 10 million DAI for 6,243 ETH at an average price of $1,602, marking its first significant on-chain activity since the original hack.

The timing is hard to ignore. ETH prices had been trading in the $1,543 to $1,602 range when the transaction went through, placing this buy squarely in what most traders would call a dip.

The Pando Rings exploit, explained

The Pando Rings attack happened on November 5, 2022. It was an oracle manipulation exploit where the attacker manipulated the value of liquidity provider tokens, enabling borrowing against inflated collateral. The damage was substantial. The attacker drained an estimated $20 to $22 million from the protocol, predominantly in ETH, BTC, and EOS. In the aftermath, Pando Rings suspended operations entirely, and its products were put on hold. Some of the stolen assets were subsequently frozen with help from Mixin Network, but clearly not all of them.

What the transaction tells us

The fact that this wallet was able to execute a $10 million swap suggests that a significant portion of the original stolen funds were never recovered or frozen, despite efforts by Mixin Network.

The choice to convert DAI into ETH is itself worth examining. DAI is a decentralized stablecoin pegged to roughly $1 at all times. Converting that stash into ETH is a directional bet that Ethereum’s price will climb from the $1,602 entry point.

What this means for investors

Oracle manipulation attacks like the one that hit Pando Rings in 2022 remain a persistent threat across DeFi. The protocol lost between $20 and $22 million, suspended operations, and never fully recovered. Oracle dependencies remain a structural weakness in many lending and borrowing protocols.

Investors watching exploiter wallets should also note that large movements of previously dormant stolen funds can sometimes precede sell pressure if the buyer eventually decides to take profits. A 6,243 ETH position sitting in a known exploiter wallet is, at minimum, something worth monitoring in the weeks ahead.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.