This weekend, the Poly Network was hit by an attack. The hacker exploited a vulnerability and created billions of dollars in tokens that he paid out to himself. Poly Network has urged users to remain calm and protect users’ assets. However, this does not resolve the situation; the network is still down.
Dear users,
As we continue to address this situation, we regret to inform you that our services will remain temporarily suspended.
【1/7】— Poly Network (@PolyNetwork2) July 2, 2023
$42 billion worth of crypto created?
The hacker operated a so-called cryptobridge, or bridge between large networks, making it possible to generate immense amounts of crypto that did not exist before. This is what Arhat of 3z3 Labs announces through Twitter. The researcher also says that at the moment just after the hack, the perpetrator’s wallet contained 42 billion dollars in tokens, at least on paper. This amount has been confirmed by blockchain security company PeckShield.
Hi @PolyNetwork2 you may want to take a look:https://t.co/cmbxAsFPGLhttps://t.co/4cqVV6EryK
—PeckShield Inc. (@peckshield) July 2, 2023
With this, the hack eclipses the most expensive hack ever in cryptoland. The previous record was also an attack on Poly Network and took place in 2021. A hacker ran off with $ 600 million. Fortunately, almost all stolen assets were returned at the time.
Ultimate damage so far limited
Although the hacker created $ 42 billion in tokens, it does not mean that the hacker will also make off with this amount. Only a small part of the loot was able to convert the perpetrator into ethereum (ETH): 400 thousand dollars to be exact. Fortunately, there was not enough liquidity available for the rest of the generated tokens.
For example, the hacker generated 99 million BNB tokens and 10 billion BUSD tokens on the Metis blockchain. metis itself has indicated that these tokens are practically worthless because there is no liquidity available. Poly Network has also frozen the tokens.
Although Arhat indicates that the hacker only stole $400,000 in tokens, opinions are divided on this. According to security firm SlowMist the hacker sold $4.39 million worth of tokens. Whether it stays at this amount remains to be seen for the time being. However, this attack raises major questions about the security of the Poly Network. As previously mentioned, this is the second major attack on Poly Network since 2021.