Gm feel good story enjoyers Last night I got an email to the Veil Cash inbox. Usually it’s scam OTC offers, but this one looked different...... A user had mistakenly sent 2000 USDC to the $VEIL Token address — but on Ethereum mainnet. Funnily enough, someone had done the same (1800 USDC) to the contract on Base, but since the token isn’t upgradeable and has no IERC20 functions, those funds are gone. But on L1… there was no contract there — yet. There are a few ways contract addresses are created; in this case, it’s derived from the deploying address and nonce. The Veil Token deployer used nonce 1 on Base, and because that address hadn’t transacted on mainnet yet, nonce 1 was still available. I quickly hacked together a simple contract that allows the deployer (me) to withdraw any funds sent to that address and send them back to the owner. A few hours after reporting it, the user had their 2009 USDC safely back. CA address: https://etherscan.io/address/0x767a739d1a152639e9ea1d8c1bd55fdc5b217d7f
























