‘Sherlock missed it’: Cork hacker slams audit firms in on-chain messages
The hacker behind last month’s $12 million exploit of Cork Protocol has weighed in on a debate between squabbling crypto security audit firms. Messages left on-chain from the hacker’s address appear to set the record straight about the root causes of the incident and lament the clout-chasing of some auditors in the wake of such attacks. The comments came in response to a post made on Wednesday by Jack Sanford, CEO of security audit firm Sherlock. Sandford accuses competitors Spearbit and Cantina of missing the vulnerability and covering up their failures. In the first message, the hacker states “sherlock missed it.” Minutes later, they moved 4,530 ether — currently valued at $11.6 million — to a new address. Who needs Netflix when you work in web3? https://t.co/7TaiMUOaq9 pic.twitter.com/LHHl6pvBHT — nisedo (@nisedo_) June 19, 2025 The debate On May 28, a16z-backed Cork Protocol announced a “security incident affecting the wstETH:weETH mar...