Polyhedra Network Hack

Around March 12, 2024, an attacker stole about 1.4 million THENA (THE) tokens, worth roughly $700,000 to $760,000, from Polyhedra Network on BNB Chain. SlowMist says the private key of an administrator account leaked and was used to maliciously upgrade a contract holding the tokens. The attacker swapped everything to BNB (about 1,300 BNB) and, according to PeckShield, sent 1,302 BNB to Tornado Cash. Cyvers said the attacker's address had been funded through Tornado Cash beforehand.

Reported figures vary. BlockSec put the loss at about $700,000, SlowMist at about $760,000, and some early reports cited $1.4 million, which may reflect the roughly 1.4 million token count rather than a dollar value.

Polyhedra said the incident had nothing to do with the security of its zkBridge, which it said had been audited by several firms and was running normally with user assets unaffected. It called the incident deliberate theft by people, not a smart contract vulnerability, and said those involved would be held legally responsible.