Top

Poly Network Exploit Results in Billions of Nonexistent Tokens

Web3 & Enterprise·July 04, 2023, 12:01 AM

Poly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.

The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.

Photo by Shubham Dhage on Unsplash

 

Network suspension

The Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.

The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.

 

Bridge vulnerabilities

Bridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.

Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.

 

Illiquid Metis tokens

Metis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.

However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.

SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.

Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

More to Read
View All
Policy & Regulation·

Oct 14, 2023

Terraform Labs Accuses Citadel Securities of Stablecoin Sabotage

Terraform Labs Accuses Citadel Securities of Stablecoin SabotageTerraform Labs, the bankrupt Singaporean blockchain firm, is pointing fingers at American market maker Citadel Securities, alleging that it played a role in an orchestrated effort to destabilize Terraform’s TerraUSD (UST) stablecoin back in May 2022.In its pursuit of justice, Terraform Labs has now called upon the United States District Court in the Southern District of Florida to compel Citadel Securities to furnish vital documents concerning their trading activities during that critical period, when the stablecoin underwent a depegging crisis, now referred to as TerraUSD Classic (USTC).Photo by Tingey Injury Law Firm on UnsplashAllegations of intentional destabilizationThat’s according to a motion filed by Terraform in the United States District Court in the Southern District of Florida, earlier this week. As alleged by Terraform Labs, the catastrophic depegging event in May 2022, which saw UST plummet from $1 to a mere $0.02, was not solely due to inherent instability in the algorithm supporting the UST stablecoin. Instead, the firm contends that it was a result of the deliberate and collaborative actions of specific third-party market participants who engaged in “shorting” to trigger the depegging.Terraform stated in its motion:“Movant [Terraform] contends that the market destabilization that occurred did not result from instability in the algorithm underlying the UST stablecoin. Instead, Movant contends that the market was destabilized due to the concerted, intentional effort of certain third party market participants to ‘short’ and cause UST to depeg from its one dollar price.”The motion also alludes to “publicly available evidence” hinting at Citadel’s intention to short the stablecoin at the time of the depegging event. In particular, it references a Discord channel chat screenshot where a pseudonymous trader purportedly had a conversation with Citadel head Ken Griffin. Griffin allegedly remarked:“They were going to Soros the f*** out of Luna UST,” seemingly drawing a connection to George Soros’ trading strategies, which often involve highly leveraged, one-way bets.Citadel refuted allegations previouslyNotably, Citadel Securities has previously refuted allegations of trading the TerraUSD stablecoin in May 2022, according to Forbes.In its motion, Terraform refers to the importance of these documents for its defense in a lawsuit filed by the US Securities and Exchange Commission (SEC) in February. The SEC lawsuit alleges that Terraform Labs and its founder, Do Kwon, played a significant role in orchestrating a multi-billion dollar cryptocurrency securities fraud.The motion concludes with Terraform arguing that its defense would be substantially hampered if Citadel Securities were to successfully withhold the requested information. In the event that the court fails to compel Citadel, Terraform has requested that the matter be transferred to the US District Court for the Southern District of New York.The matter has been the subject of debate within the crypto community in recent months. In May a community member stated:“As I’ve been saying. People blamed Citadel et al. This was nothing but a rug pull. Wake up. Do Kwon says the dissolving of Terraform Labs in Korea days before the $LUNA and $UST crash is ‘purely coincidental.’”With the matter now being raised in the courts, it looks like the legal system will be the final adjudicator regarding the issue.

news
Web3 & Enterprise·

May 15, 2023

LG Goes Further Down the Web3 Rabbit Hole with NFT Patent

LG Goes Further Down the Web3 Rabbit Hole with NFT PatentSouth Korean consumer electronics behemoth LG has delved deeper into the Web3 world, this time with a patent filing that would make NFTs more available to TV viewers.Enabling NFTs for the mass marketAccording to the filing, which was made with the World Intellectual Property Organization (WIPO), the electronics giant is seeking to acquire intellectual property protection on a capability to have a smart TV connect with an NFT market server.That ability would allow the user to then send, receive and display digital artwork. Furthermore, the consumer could complete purchases using an associated digital wallet, relative to NFT-based artwork that they would have the ability to browse through on their LG smart TV.While crypto and Web3 continue to garner a lot of attention, it can still seem sometimes that it exists in a bubble all of its own. Moves like this one from an organization as professional as LG are encouraging, as they demonstrate that LG believes that NFTs are going to be a part of the future, and most importantly, that they’re going to enable mass market participation and adoption.Blade WalletThis is not LG’s first venture into the world of NFTs. Last year, the corporation launched its very own NFT marketplace. Known as “LG Art Labs”, it enables users of US LG TVs that run the WebOS 5.0 operating system, to trade digital collectibles.Earlier this year, the firm launched the Blade Wallet, a third party audited, self-custody digital wallet which runs on the Hedera public ledger. That development has come out of a partnership that LG has developed with the Hedera Hashgraph platform much earlier in 2020. Just as with the Blade Wallet, the LG Art Labs NFT marketplace also runs on Hedera. To support these early stage products, LG itself has been a node operator on the Hedera network since 2020.This recent patent filing references an NFT marketplace and a digital wallet. As we’ve established, the corporation has already launched both of them already. All of that points to the electronics giant executing on a well thought through plan which will bring NFTs to the mass market.Broader interestLG isn’t going to have it all to itself. Samsung, yet another South Korean consumer electronics giant, has also dipped its toe in the water where NFTs are concerned. In January 2022, the company released an NFT marketplace on three of its TV models. That initiative was enabled due to its partnership with leading curated NFT marketplace, Nifty Gateway.Neither will the South Koreans have the consumer electronics-enabled NFT market all to themselves. Japanese consumer electronics conglomerate Sony filed a patent in March that will allow players of Sony products to access interactive Web3 gameplay. That application will be centered upon the use of NFTs also.Sony’s attempts to delve into the Web3 arena have been more recent. In February of this year, Sony Network Communications, its internet provider division, partnered with the project team behind the Astar blockchain in order to create an incubation program for companies who are working on NFT-based innovation and decentralized autonomous organizations (DAOs).Photo by Shubham Dhage on Unsplash

news
Policy & Regulation·

May 23, 2025

Pakistan establishes authority to regulate crypto

Pakistan’s Ministry of Finance has signed off on the establishment of the Pakistan Digital Assets Authority (PDAA), a body which will be responsible for the implementation of regulations governing blockchain and the digital assets sector. In a report published by Pakistani English-language newspaper Dawn, the media outlet outlined that the Ministry of Finance has taken this step in an effort to embrace future innovation in the finance sector.  The new agency will be responsible for monitoring the operations of digital wallet service providers, stablecoin issuers, the development firms behind decentralized finance (DeFi) protocols, crypto custodians and crypto exchange platforms. Photo by Hamid Roshaan on UnsplashFrom crypto ban to crypto regulationIn October 2022, Pakistan was removed by the Financial Action Task Force (FATF), a global money laundering and terrorist financing watchdog, from its grey list. The following year, Pakistan’s Minister of State for Finance and Revenue, Aisha Ghaus Pasha outlined that banning cryptocurrency was a condition of the country’s removal from the FATF grey list. Accordingly, the South Asian country proceeded to ban digital assets, with Ghaus Pasha declaring that crypto would “never be legalized in Pakistan.”Despite the adverse position taken previously by the authorities in Pakistan where digital assets were concerned, in 2024 a survey carried out by Chainalysis revealed that Pakistan featured strongly in terms of retail-level crypto adoption. With this latest development, Pakistan is moving forward progressively with digital assets, albeit that it is doing so while being cognizant of the current requirements demanded by FATF related to crypto. The newly-formed PDAA will act to ensure FATF-compliant innovation, while striving for economic inclusion and the adoption of digital assets in a responsible manner. Regulating to lead crypto innovation rather than catching upPakistan’s current Minister for Finance and Revenue, Muhammad Aurangzeb, said that “Pakistan must regulate not just to catch up — but to lead.” He added that through the establishment of the PDAA, a digital assets regulatory framework that protects consumers will be created. Furthermore, he claimed that such an approach would attract global investment, putting Pakistan “at the forefront of financial innovation.”Another area of focus for the PDAA will be the facilitation of the tokenization of government debt and national assets. Pakistan runs an annual average electricity surplus of 4,000 megawatts. In 2024, total electricity generation was recorded at 92,091 GWh while demand weighed in at 68,559 GWh. With that, the Pakistani authorities want the PDAA to create the correct conditions that will lead to regulated Bitcoin mining operators utilizing this energy resource. Other objectives which have been set out for the new agency include encouraging the growth of startups aimed at building blockchain-based solutions at scale, the regulation of what is estimated to be a $25 billion informal crypto market and the provision of legal clarity within the crypto sector in Pakistan for both local and international investors. This latest positive development follows the formation of the Pakistan Crypto Council (PCC) back in February. That event signaled a policy shift in Pakistan with regard to digital assets. In March PCC CEO Bilal bin Saqib said that Pakistan was done sitting on the sidelines and that the authorities now want to see Pakistan develop as a “leader in blockchain-powered finance.”

news
Loading