# Money road (MISC) - WRITEUP

We know that the Banco tungurahua has been hacked with a ransomware on Oct 28. The hackers requested a ransom of 5 ETH on the [Ropsten Network](https://www.ropsten.etherscan.io), and a few days after the bank returned to normality.

Did the bank paid the ransom? The flag is the account id who made the payment.

First of all, we know the criminal's account id:`0x7097894A81fDFa82d0267fC7DAB7d88d169CC048`, so we search it on the Ropsten network. Once we've found it, we just have to check if there is a 5 ETH transaction between October 28th and November 1st.

There is a transaction made by the id:`0x78c115f1c8b7d0804fbdf3cf7995b030c512ee78`, so we put the account id in the flag format given:

`FLAG{0x78c115f1c8b7d0804fbdf3cf7995b030c512ee78}`