{"id":49757,"date":"2021-09-20T11:22:03","date_gmt":"2021-09-20T08:22:03","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=49757"},"modified":"2025-09-02T14:18:11","modified_gmt":"2025-09-02T11:18:11","slug":"defi-project-pnetwork-loses-277-btc-in-hacker-attack","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/defi-project-pnetwork-loses-277-btc-in-hacker-attack\/","title":{"rendered":"DeFi project pNetwork loses 277 BTC in hacker attack"},"content":{"rendered":"<p>The attacker exploited a bug in the code and withdrew 277 BTC (~$12.7 million) from the cross-chain DeFi protocol pNetwork.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">1\/N We&#8217;re sorry to inform the community that an attacker was able to leverage a bug in our codebase and attack pBTC on BSC, stealing 277 BTC (most of its collateral).<\/p>\n<p>The other bridges were not affected. All other funds in the pNetwork are safe.<\/p>\n<p>\u2014 pNetwork \ud83e\udd9c (@pNetworkDeFi) <a href=\"https:\/\/twitter.com\/pNetworkDeFi\/status\/1439690593211490324?ref_src=twsrc%5Etfw\">September 19, 2021<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThe attacker was able to use a bug in our codebase and attack pBTC on the <span data-descr=\"Binance Smart Chain\" class=\"old_tooltip\">BSC<\/span>, stealing 277 BTC (the majority of the collateral). The other bridges were not affected. All other funds in pNetwork are safe,\u201d the project team said.<\/p>\n<\/blockquote>\n<p>The developers offered the hacker a $1.5 million reward for returning the funds, although they regarded such a development as unlikely.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cUnfortunately, finding vulnerabilities is part of the game, but we all want the DeFi ecosystem to keep growing. Returning the funds would be a step in that direction,\u201d pNetwork said, addressing the hacker.<\/p>\n<\/blockquote>\n<p>Later, the developers said they had prepared a fix for the vulnerability and expected the bridges between networks to be back online within a few hours.<\/p>\n<p>Earlier, on 13 September 2021, a hacker drained <a href=\"https:\/\/u1f987.com\/en\/news\/defi-project-on-the-avalanche-blockchain-hacked-for-3-2-million\">assets worth $3.2 million<\/a> from the DeFi protocol Zabu Finance on the Avalanche.<\/p>\n<p>On 17 September the attacker <a href=\"https:\/\/u1f987.com\/en\/news\/hacker-stole-more-than-3-million-from-sushiswaps-miso-platform\">stole 864.8 ETH<\/a> (~$3.09 million at the time) from SushiSwap&#8217;s MISO <span data-descr=\"Initial DEX Offering, a primary coin offering on a decentralized exchange\" class=\"old_tooltip\">IDO<\/span>-platform. On the same day he returned the funds.<\/p>\n<p>Subscribe to ForkLog news on <a href=\"https:\/\/www.facebook.com\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Facebook<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The attacker exploited a bug in the code and withdrew 277 BTC (~$12.7 million) from the cross-chain DeFi protocol pNetwork.<\/p>\n","protected":false},"author":1,"featured_media":49758,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1093],"class_list":["post-49757","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-defi"],"aioseo_notices":[],"amp_enabled":true,"views":"21","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/49757","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=49757"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/49757\/revisions"}],"predecessor-version":[{"id":49759,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/49757\/revisions\/49759"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/49758"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=49757"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=49757"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=49757"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}