Top

Poly Network Exploit Results in Billions of Nonexistent Tokens

Web3 & Enterprise·July 04, 2023, 12:01 AM

Poly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.

The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.

Photo by Shubham Dhage on Unsplash

 

Network suspension

The Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.

The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.

 

Bridge vulnerabilities

Bridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.

Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.

 

Illiquid Metis tokens

Metis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.

However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.

SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.

Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

More to Read
View All
Web3 & Enterprise·

Aug 17, 2023

Uzbekistan’s New Private Bank Joins National Crypto Card Initiative

Uzbekistan’s New Private Bank Joins National Crypto Card InitiativeIn a step towards enhancing its cryptocurrency ecosystem, the Republic of Uzbekistan has given the green light to include another private bank in its ongoing national crypto card project. The development was announced through an official press release earlier this week by the National Agency of Perspective Projects (NAPP), the country’s regulatory authority for digital assets.Photo by engin akyurt on UnsplashBuilding upon a crypto frameworkUnder the provisions outlined by the Uzbekistan Ministry of Justice on December 30 of last year, the Special Regulatory Sandbox Regime was established. This unique framework empowers specific entities within Uzbekistan’s crypto sphere to provide specialized services. JSV Ravnaq Bank has now been registered as a member of this regime, enabling its active participation in the pilot phase of the nation’s crypto card project.Virtual bank cardThis initiative is poised to introduce a virtual bank card named “CRYPTO CARD — UzNEX.” The card’s standout feature is its ability to facilitate automatic fund addition to users’ primary accounts. This is achieved by swiftly converting crypto assets from a digital wallet on a partner crypto exchange platform.A vital aspect of the crypto card’s development lies in its compatibility testing with various financial systems, including the widely used Mastercard payment platform. According to NAPP’s statement, the participant bank within the special regulatory regime will be rigorously testing the integration of the automated banking system, crypto-exchange information system, bank processing center, and the MasterCard international payment system.December launchNotably, the addition of Ravnaq Bank marks the second entrant into the project, with Kapital Bank being the first participant approved in May. While Kapital Bank’s testing phase commenced at the end of June 2023, Ravnaq Bank is set to initiate its test launch by the end of October 2023. Both banks are expected to launch the full project by late December, in accordance with NAPP’s timeline.Beyond these private banks, the Special Regulatory Sandbox Regime also includes UZINFOCOM, a company authorized to develop NFT certificates based on distributed data registry technology.

news
Policy & Regulation·

Sep 27, 2023

Upcoming Regulatory Framework in Taiwan Sees Crypto Exchanges Unite

Upcoming Regulatory Framework in Taiwan Sees Crypto Exchanges UniteIn preparation for the impending arrival of a regulatory framework for cryptocurrencies in Taiwan, nine prominent cryptocurrency firms have announced their collective efforts to establish an industry association.The nine exchange businesses announced the development via a press release which was published on Tuesday. The move comes in anticipation of Taiwan’s Financial Supervisory Commission (FSC) releasing comprehensive guidelines on cryptocurrency trading and payments by the end of September.Photo by Timo Volz on UnsplashDeveloping regulatory environmentThe industry body will include participation from native exchanges such as MaiCoin, BitoGroup, and ACE. While Taiwan has been behind the regulatory curve until now where crypto is concerned, the one measure that the FSC had already taken steps to mandate was that virtual asset services providers (VASPs) in Taiwan must adhere to the country’s anti-money laundering (AML) regulations. However, numerous other intricacies unique to the cryptocurrency industry still require careful consideration and regulation.Authorities in Taiwan have also put forward ten guiding principles for VASPs, designed to protect Taiwanese consumers.The forthcoming guidelines aim to address these concerns by introducing a comprehensive set of rules inspired by the VASP licensing framework in Hong Kong. One of the primary focuses of these proposed guidelines is consumer protection. They advocate for specific hot and cold wallet ratios for customer deposits with cryptocurrency exchanges, a measure designed to safeguard customer funds. Additionally, the guidelines suggest mandatory insurance against user losses to further enhance consumer confidence.Moreover, the FSC’s guidelines intend to prevent offshore cryptocurrency exchanges from operating onshore in Taiwan without proper compliance registration. This step aims to ensure that all participants in Taiwan’s cryptocurrency market adhere to uniform standards.In a bid to stabilize the Taiwanese financial system and prevent deceptive advertising practices, the guidelines also propose a ban on stablecoins linked to the Taiwanese dollar and impose restrictions on foreign exchange advertising within the country.Enabling self-regulationRegulators have also proposed the classification of crypto regulations within their own novel business category. As part of that initiative, officials expressed an interest in fostering self-regulation. The formation of this industry group could be deemed to be an encouraging sign relative to that aspiration.The nine cryptocurrency firms forming the industry association have established a working group led by Winston Hsiao, Co-Founder of XREX. This group aims to expedite the development of self-regulatory rules based on the forthcoming FSC guidelines.Wayne Huang, another Co-Founder of XREX, expressed his hope that the new FSC guidelines will provide the cryptocurrency industry with legitimacy, oversight, a clear growth trajectory, and an accelerated path to earn public trust.The formation of this industry association, coupled with the impending release of the FSC’s comprehensive regulatory guidelines, marks a significant milestone for Taiwan’s cryptocurrency sector. As the industry evolves, these proactive measures seek to ensure its stability, security, and compliance with international standards.

news
Web3 & Enterprise·

Mar 08, 2024

World’s oldest exchange gains in-principle approval in Singapore

Bitstamp, regarded as the longest-running cryptocurrency exchange in the business, declared on March 6 that it has obtained in-principle approval for a license to function as a Major Payment Institution (MPI) from the Monetary Authority of Singapore (MAS).Photo by Zhu Hongzhi on UnsplashFirst major Euro exchange in SingaporeThis preliminary approval, a precursor to a full-fledged license for operation in Singapore, marks a significant milestone for Bitstamp towards offering digital payment token services within the city-state. According to the exchange's press release, it's the first crypto trading platform with a substantial presence in the European Union (EU) to secure such approval from MAS. The nod from Singapore’s financial regulator arrives amidst notable regulatory strides in the crypto domain, including the European Union’s rollout of the Markets in Crypto-Assets (MiCA) framework and the green light given by the U.S. for Bitcoin ETFs. Focusing on AsiaBitstamp's strategic focus on the Asia Pacific region, with Singapore as its central hub, underscores its focus in delivering services to both institutional and retail clientele across the region. The firm’s intent in this regard became clear in August of last year when Bitstamp sought capital funding to enable it to extend the platform’s reach into various markets across Asia. Whilst the company’s origins can  be traced back to Slovenia, it has since developed further ties with Asia. In 2018, the company was acquired by NXMH, a subsidiary of South Korea’s NXC Corporation. The same holding company owns Korean crypto exchange Korbit. Compliance strategyWhile the licensing is quite the achievement, the company already boasts a robust regulatory track record, surpassing the 50-license mark across key markets such as Luxembourg, the Netherlands, Italy, Spain, France the United States (with coverage in 40 states including New York, Washington, Texas and Florida) and the United Kingdom. In its press release the company referred to its ever-growing licensing collection, outlining that “compliance and regulation [are] at the heart of all operations.” Leonard Hoh, Bitstamp's APAC General Manager, lauded Singapore's proactive stance in establishing a regulatory framework for crypto exchanges, positioning the city-state as a pivotal player in the digital assets landscape. Singapore has already granted full licenses to several crypto service providers, including Blockchain.com, Circle, Coinbase and Ripple. In late 2023, Bitstamp initiated talks with three major European banks regarding the potential introduction of cryptocurrency services in 2024. This signals a broader trend within the EU, where the crypto regulatory initiative, MiCA, is smoothing the path for traditional financial institutions to venture into the digital assets realm. Robert Zagotta, Bitstamp’s Chief Commercial Officer, highlighted the surge in interest surrounding its “Bitstamp-as-a-Service” offering, especially within European circles. This service furnishes a white-label licensing framework, coupled with requisite technology, to aid banks and fintech entities in facilitating cryptocurrency transactions for their clientele. However, the regulatory landscape isn't as welcoming in India, where the country’s Financial Intelligence Unit (FIU) urged the Ministry of Electronics and Information Technology to block the URLs of nine major global crypto exchanges, including Bitstamp, in late 2023. 

news
Loading