The decentralized borrowing protocol, Prisma Finance, has reported that despite efforts to mitigate the fallout from last week's $11.6 million exploit, approximately $540,000 in funds from 14 accounts remain vulnerable due to the failure to revoke the affected smart contract.

Following the exploit, which occurred on March 28, Prisma Finance disclosed that the breach stemmed from two MigrateTroveZap contracts intended for migrating user positions between trove managers, as detailed in a post-mortem analysis released on March 31.

In a recent development, core contributor "Frank" outlined a "path forward" strategy on April 1, emphasizing the protocol's commitment to retrieving the compromised funds. However, Frank underscored that the immediate priority is to unfreeze the protocol and ensure the security of all users' wallets and positions before proceeding with recovery efforts.

Despite ongoing efforts to rectify the situation, the self-proclaimed "white hat" hacker responsible for the exploit has refused to return the funds until Prisma Finance issues a public apology and discloses the identities of the team members.

At present, there are still 14 accounts that have yet to revoke the vulnerable smart contract, with five of them deemed "at risk," collectively accounting for over $500,000 in open trove positions. The largest of these vulnerable addresses contains $484,380, while the remaining four range from $7,120 to $22,080 in collateral.

Prisma Finance operates as a decentralized borrowing protocol utilizing "troves," which serve as Ethereum addresses allowing users to initiate and manage loans within the platform.