Poly Network is a protocol that can be used to transfer digital currency between blockchains. Because of this role of the bridge, the stolen funds are in the form of different tokens, ranging from Ethereum to Dogecoin. According to Bloomberg, this hack is one of the largest in the field of decentralized finance.
The Poly Network team reached out to the attacker via Twitter. It is noted in the message that the stolen funds belonged to real people and criminal liability may arise for this crime.
Most likely, the appeal worked. After some time, the hacker announced that he was ready to return the money, but he needed to provide a way to send it back to the Poly Network. After that, he was given addresses, where tokens later began to flow.
As of Wednesday, the hacker has returned about $ 5 million. At the same time, it became obvious that the criminal initially returned the currency with a lower value, which he had previously reported with the text "DUMPING SHITCOINS FIRST" (First, dump useless coins).
Previously, theories were put forward about how the hacker managed to crank this case. Two cybersecurity teams speculated that the hacker might have signed the transfers with a legal private key, or used an error to sign the message. Poly Network immediately stopped these assumptions, noting that the criminals managed to use the interaction of two contracts.
We are aware of the https://t.co/IgGJ0598Q0 exploit that occurred today. While no one controls BSC (or ETH), we are coordinating with all our security partners to proactively help. There are no guarantees. We will do as much as we can. Stay #SAFU. 🙏 https://t.co/TG0dKPapQT— CZ 🔶 Binance (@cz_binance) August 10, 2021
The attacker behind the theft made several conflicting statements. At the beginning, after the start of the refund, he said that he was not too interested in them, because he wanted to return some tokens or was just going to leave them here. He went on to say that the return (or, in his words, the salvation of the world) would turn him into a "legend for the ages." In the latest publication, there is an appeal for the purpose of donating funds from those who support the decision to return, which does not fit with the initial appeal of lack of interest in funds.