{"id":81107,"date":"2023-07-03T11:49:34","date_gmt":"2023-07-03T08:49:34","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=81107"},"modified":"2025-09-11T20:59:00","modified_gmt":"2025-09-11T17:59:00","slug":"experts-call-the-34-billion-attack-the-new-poly-network-exploit","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/experts-call-the-34-billion-attack-the-new-poly-network-exploit\/","title":{"rendered":"Experts call the ‘$34 billion’ attack the new Poly Network exploit"},"content":{"rendered":"

On July 2, unknown attackers targeted the Poly Network cross-chain protocol and minted tokens worth tens of billions of dollars across several blockchains. The team paused the bridge’s operations.<\/p>\n

\\\"Experts
Data: Twitter<\/a>.<\/figcaption><\/figure>\n

\\n<\/p>\n

\u201cDear users, we would like to inform you that Poly Network is temporarily suspending its services due to the recent attack. We are actively engaging with the relevant parties and carefully assessing the extent of the affected assets,\u201d the developers said.<\/p>\n

\\n<\/p><\/blockquote>\n

Cross-chain bridges<\/a> allow transferring tokens between networks, locking assets in one and issuing in another. Supposedly, the hackers manipulated the smart contract that executes the operations.<\/p>\n

multisignature<\/a> addresses were used to control the smart contract. The attackers minted 10 billion BUSD and 100 million BNB (~$24.5 billion at the time) on Metis, 999 trillion SHIB on Heco and millions of tokens on other networks.<\/p>\n

According to a preliminary assessment<\/a> by the Poly Network team, the incident affected 57 different tokens across 10 blockchains.<\/p>\n

According to PeckShield<\/a>, at one point the hackers’ wallets held assets totaling $42.8 billion.<\/p>\n

\\\"Experts
Data: Twitter<\/a>.<\/figcaption><\/figure>\n

Experts note that the protocol team had used for two years a simple 3-of-4 multisig scheme.<\/p>\n

Dedaub also noted that the Poly Network developers did not respond to the attack for seven hours. This allowed the hackers to sell assets worth about $5.5 million. A lack of sufficient liquidity across networks prevented a larger payoff.<\/p>\n

The Metis team confirmed that, for this reason, the attackers had no way to realise the issued BUSD and BNB worth about $34.5 billion.<\/p>\n

\\\"Experts
Data: Twitter<\/a>.<\/figcaption><\/figure>\n

In August 2021, unknown attackers hacked Poly Network and withdrew $611 million<\/a> in various cryptocurrencies. Over the course of a month the hackers returned all funds to the protocol<\/a> and even the reward paid to them<\/a> of 160 ETH (~$500,000 at the time).<\/p>\n

In the first half of 2023, the crypto industry lost about $655.6 million<\/a> due to hacks and fraud.<\/p>\n","protected":false},"excerpt":{"rendered":"

On July 2, unknown attackers targeted the Poly Network cross-chain protocol and minted tokens worth tens of billions of dollars across several blockchains. The team paused the bridge.<\/p>\n","protected":false},"author":1,"featured_media":81108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,2231],"class_list":["post-81107","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-poly-network"],"aioseo_notices":[],"amp_enabled":true,"views":"30","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=81107"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81107\/revisions"}],"predecessor-version":[{"id":81109,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81107\/revisions\/81109"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/81108"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=81107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=81107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=81107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}