I created a flashbots bundle to recover $44K worth of unclaimed Gelato ICO tokens from a compromised wallet. This is the source code to this Twitter thread.

• The compromised wallet has had it's private key leaked, a malicoius individual set up a bot to monitor for incoming transactions and to steal tokens as soon as they are deposited to the compromised address.
• To claim the ICO airdrop the compromised wallet needs to be seeded with enough ETH to pay for the gas fees (without the bots stealing the ETH as soon as it is deposited).

The solution is to send transactions to seed + claim + withdraw all in the same block. We can do this by sending these transactions as a bundled to the flashbot network using the ethers-provider-flashbots-bundle package.

1. Send funds from funding_wallet to compromised_wallet to cover gas for claiming + transfering
2. Claim Gelato ICO tokens from compromised_wallet
3. Transfer claimed Gelato tokens from compromised_wallet to ledger_wallet
4. Transfer all unused ETH from compromised_wallet to funding_wallet

The transactions can be seen bundled together in block 14488296