Top

Poly Network Exploit Results in Billions of Nonexistent Tokens

Web3 & Enterprise·July 04, 2023, 12:01 AM

Poly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.

The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.

Photo by Shubham Dhage on Unsplash

 

Network suspension

The Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.

The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.

 

Bridge vulnerabilities

Bridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.

Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.

 

Illiquid Metis tokens

Metis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.

However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.

SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.

Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

More to Read
View All
Policy & Regulation·

Jan 08, 2024

Samjong KPMG and Xangle seminar says crypto market will improve this year

According to crypto data research platform Xangle, the crypto market is on the road to recovery this year thanks to positive outlooks on developments like a spot Bitcoin ETF, regulatory changes and diversified services.Photo by CHUTTERSNAP on UnsplashBitcoin’s resilienceSpeaking at a special seminar on virtual assets co-hosted by CrossAngle and accounting firm Samjong KPMG in Seoul last Friday, Kim Jun-woo, Co-Founder and CEO of Xangle, cited Bitcoin’s positive reputation as one of the reasons for the optimism. "There are reports that Bitcoin has a low correlation with risky virtual assets," he said. Public sentiment toward Bitcoin is also expected to improve this year as the global economy is expected to emerge from recession and manage a soft landing. Another major item on the agenda is a possible approval by the U.S. Securities and Exchange Commission (SEC) of a spot Bitcoin ETF this quarter. Web3 revolutionIn terms of innovative services, Kim stated that Web3 is expected to be actively implemented in local corporations after going through conceptual and technical testing stages. "In South Korea’s crypto market, (resources like) app stores and mobile phones exist, but there are no actual apps," Kim said. "I expect that figures from traditional finance and existing Web2 companies will enter the Web3 industry this year."  "Web2 companies will discover new business opportunities in Web3 and play a role in bringing existing content and users to Web3," said Lee Hyun-woo, Co-CEO of Xangle, in his presentation on the importance of Web3 system integration and virtual asset disclosure. "Their participation is important for the stable maturation of the Web3 ecosystem," he added. Regulation and governanceIn regards to policies and regulations, expectations point to a resolution of various uncertainties as cryptocurrencies are slowly becoming more integrated into the sphere of traditional finance. In South Korea, the imposition of basic legal regulations on virtual assets is accelerating, such as the Virtual Asset User Protection Act. The Financial Services Commission (FSC) also released guidelines for accounting and disclosure of virtual assets last month, which was examined in detail at the seminar. "The financial authorities' guidelines are more detailed than before. We expect additional guidelines from them in the future to further resolve shortcomings," Choi Yeon-taek, Managing Director of Samjong KPMG, commented.

news
Markets·

Oct 31, 2024

HKEX to launch digital asset index with real-time pricing within Asian time zone

Hong Kong Exchanges and Clearing Limited (HKEX), the operator of the Hong Kong stock exchange, has announced plans to launch a digital asset price index. The index which the company is marketing as the HKEX Virtual Asset Index Series, will aim to provide for the developing asset class, while complimenting Hong Kong’s overarching efforts to transform itself into a regional digital assets hub. The company announced details of the new product offering in a press release published to its website on Oct. 28. HKEX indicated that the product will go live on Nov. 15, outlining that the product “provides investors with transparent and reliable benchmarks for Bitcoin and Ether pricing in the Asian time zone.”Photo by Kanchanara on UnsplashReference index for Bitcoin (BTC) and Ether (ETH)The firm claims that the Index Series will include a Reference Index for Bitcoin (BTC) and Ether (ETH) while providing a Reference Rate for the two leading digital assets. The Reference Index will be formulated using a 24-hour volume-weighted reference spot price, with that pricing coming from leading virtual asset exchanges. The Reference Rate has been devised with the settlement of financial products in mind. As a result, it will be calculated on a daily basis at 16:00 Hong Kong time. From a compliance perspective, the product complies with the European Union’s (EU) Benchmark Regulation (BMR), being the first such product to be developed in Hong Kong. Additionally, the Index Series will be administered by CCData, a UK-headquartered data and index solutions firm formerly known as CryptoCompare.  Taking to the X social media platform, CCData outlined that the product is underpinned by its data selection process, leveraging its “Exchange Benchmark methodology to provide highly robust real-time and EOD  [end-of-day] reference rates.” The firm added that the offering will introduce “essential benchmarks for the Asian market,” while enhancing transparency and reliability within the digital assets sector, broadening opportunities for market participants across the region. Enabling informed investment decisionsHKEX CEO Bonnie Chan said that the company was pleased to introduce the HKEX Virtual Asset Index Series to meet the region's growing demand for this fast-emerging asset class. “By offering transparent and reliable real-time benchmarks, we seek to enable investors to make informed investment decisions,” she added.Like many other financial services firms in TradFi, HKEX has been getting itself acquainted with the blockchain and digital assets sector. In October of last year, the firm launched a blockchain-based settlement platform called Synapse. The platform relies upon DAML-based smart contracts. Earlier this year, a number of asset management firms launched spot Bitcoin and Ethereum exchange-traded funds (ETFs) on the exchange. In April, a report published by HKEX suggested that the true potential of crypto ETFs had yet to be fully realized, pointing out that a number of regulatory tweaks would be necessary to better support digital asset-based products. HKEX itself could have a greater role to play in the expansion of the digital assets sector in Hong Kong. Last month Hong Kong Legislative Council member Lee Wai-hung called on the platform to expand its range of derivatives, including crypto derivatives.

news
Policy & Regulation·

Jun 16, 2023

Hong Kong Pressing Banks to Facilitate Crypto Clients

Hong Kong Pressing Banks to Facilitate Crypto ClientsHong Kong’s banking regulator is urging banks, including HSBC and Standard Chartered, to onboard crypto exchanges as clients, despite increasing regulatory scrutiny of the industry in the United States.That’s according to a report published by the Financial Times (FT) on Wednesday. The FT cited three people who it claims are familiar with the matter, together with a letter seen by the publication as the basis for the assertion.Photo by Ansel Lee on PexelsChallenging crypto banking reticenceAt a recent meeting, the Hong Kong Monetary Authority (HKMA) questioned these UK-based lenders, together with the Bank of China, about their reluctance to accept crypto exchanges as customers, according to sources familiar with the matter. The HKMA emphasized that due diligence on potential clients should not create unnecessary burdens, particularly for those seeking opportunities in Hong Kong. While banks do not have a ban on crypto clients, concerns over potential money laundering and illegal activities have made them cautious.The pressure faced by banks highlights the challenges Hong Kong is facing in establishing itself as a global hub for the crypto industry, especially in light of previous high-profile collapses, such as the implosion of FTX. However, the HKMA is encouraging banks to overcome their reservations, as the regulator believes there is resistance from senior executives who adhere to traditional banking mindsets.The enthusiasm of some Hong Kong officials for the sector is evident as pro-Beijing lawmaker Johnny Ng invited Coinbase and other crypto exchanges to set up operations in the city following the recent SEC lawsuit against Binance and Coinbase.Caught between opposing forcesBanks in Hong Kong find themselves walking a fine line between supporting the crypto industry as encouraged by the government and being cautious due to the US regulatory environment. They want to ensure the industry’s development aligns with government policies, but they are also concerned about potential anti-money laundering and know-your-customer issues.The HKMA and the Securities and Futures Commission (SFC) have been vocal about their expectations, setting them apart from regulators in other jurisdictions that may be more skeptical of cryptocurrencies. Last month it emerged that crypto startups are having difficulties in establishing banking facilities in the autonomous Chinese territory. At the time, the HKMA did convene a meeting to bring parties together in order to forge a path forward.While Hong Kong has a history as a crypto center, its position weakened after Beijing’s crackdown on the industry in 2017. However, the Hong Kong government aims to reestablish the city as a hub for digital assets, having expressed its desire to provide a supportive environment for crypto-related businesses. The introduction of a new licensing regime for crypto platforms in Hong Kong is part of the government’s efforts to attract more crypto groups to the city.HSBC, Standard Chartered, and the Bank of China hold influential positions in Hong Kong as issuers of the city’s currency and have key roles in the Hong Kong Association of Banks lobby group. Standard Chartered claims that it maintains regular dialogue with regulators on various subjects, while HSBC has claimed that it is actively engaging in policies and developments within the nascent industry.

news
Loading