Poly Network Hack

Poly Network, a crosschain bridge, suffered an exploit leading to a loss of 5,196.95 $ETH, equivalent to 10,201,612 $USD.

The Poly Network suffered an attack via access control, where the exploiter was able to generate signatures possibly using the project's wallets, and drained significant amounts of various assets in multiple chains, including Ethereum, Binance Smart Chain, Avalance, and Metis.

After the first distinct attack, the exploiter was able to swap a large amount of $SHIB and other liquid assets for ETH and drain $USDC and $USDT in the other two attacks, which were then swapped for ETH. In total, the exploit resulted in the theft of 5,196.95 $ETH, equivalent to around 10,201,612 $USD.

The stolen assets were not only in ETH but also included non-liquid ERC20 tokens. The total stolen assets worth across several chains was approximately way more than the actual funds lost, but attackers were unable to cash out the cause of low liquidity. However, 18,444,696 $USD worth of tokens were distributed between 17 EOA addresses, along with 1 $ETH each, for possible future cash out.

Attacker Addresses:

• Address
• Address
• Address

Significant Funds Holders:

• Address holds 1,557.36 $ETH
• Address holds 1,371.64 $ETH
• Address holds 1,500 $ETH
• Address holds 300 $ETH
• Address holds 440 $ETH
• Address holds 11.95 $ETH and 814,763 $USD worth of non-liquid ERC20 tokens

Malicious Transaction Examples:

Tx 0xe280…76da

Tx 0x0a75…263d

Tx 0x3a6e…f993

Minor funds holders are:

• Address: 3,088,065 $USD worth of $COW tokens
• Address: 1 $ETH and 1,900,551 $USD worth of $XTM tokens
• Address: 1 $ETH and 2,638,524 $USD worth of $OOE tokens
• Address: 1 $ETH and 2,251,610 $USD worth of $Metis tokens
• Address: 1 $ETH and 1,684,974 $USD worth of $STACK tokens
• Address: 1 $ETH and 1,531,034 $USD worth of $NEST tokens
• Address: 1 $ETH and 978,723 $USD worth of $SLD tokens
• Address: 1 $ETH and 517,760 $USD worth of $REVO tokens
• Address: 1 $ETH and 745,726 $USD worth of $8PAY tokens
• Address: 1 $ETH and 658,541 $USD worth of $CWS tokens
• Address: 1 $ETH and 11,000,000 $SPAY tokens
• Address: 1 $ETH and 317,616 $USD worth of $RPG tokens
• Address: 1 $ETH and 311,356 $USD worth of $GM tokens
• Address: 1 $ETH and 289,360 $USD worth of $MIX tokens
• Address: 1 $ETH and 261,714 $USD worth of $AXL tokens
• Address: 1 $ETH and 168,927 $USD worth of $DOV tokens
• Address: 1 $ETH, 142,767 $USD worth of $FEI and 142,685 $USD worth of $TRIBE tokens