Top

Poly Network Exploit Results in Billions of Nonexistent Tokens

Web3 & Enterprise·July 04, 2023, 12:01 AM

Poly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.

The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.

Photo by Shubham Dhage on Unsplash

 

Network suspension

The Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.

The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.

 

Bridge vulnerabilities

Bridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.

Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.

 

Illiquid Metis tokens

Metis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.

However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.

SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.

Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

More to Read
View All
Policy & Regulation·

Oct 27, 2023

CoinFLEX’s Creditors Sue CEO and OPNX in Legal Dispute

CoinFLEX’s Creditors Sue CEO and OPNX in Legal DisputeCreditors of Seychelles-incorporated crypto platform CoinFLEX have taken legal action against its CEO, Mark Lamb, alleging that his involvement in launching the claims trading platform OPNX violated his fiduciary duties to CoinFLEX.Photo by Sasun Bughdaryan on UnsplashDissatisfied CoinFLEX creditorsAccording to the civil action, which was filed in a Hong Kong court earlier this month, they view OPNX as a competing business to CoinFLEX. The lawsuit also implicates CoinFLEX investor Roger Ver.Lamb joined forces with Su Zhu and Kyle Davies, the founders of the now-defunct Singaporean crypto hedge fund Three Arrows Capital (3AC), to introduce a platform for trading bankruptcy claims, initially named GTX (later rebranded as OPNX). CoinFLEX co-founder Sudhu Arumugam also backed the project, with Leslie Lamb, Mark Lamb’s wife, installed as CEO.Lamb and CoinFLEX defended the project, claiming it would enhance transparency in financial markets and benefit CoinFLEX creditors. However, creditors argue that Lamb’s actions indicate a strategic move to distance himself and his associates from CoinFLEX. With that, they’re seeking to prevent him from representing CoinFLEX in the future.Complaint detailsThe creditors of CoinFLEX assert that OPNX was not authorized by CoinFLEX’s board or creditors and that Mark Lamb independently appropriated CoinFLEX’s intellectual property, technology, customer base, and employees to create the claims exchange.They accuse Lamb of entering into a harmful licensing and purchase agreement with OPNX’s parent companies, Open Technologies Holding LTD and Open Technology Markets LTD. Through their lawsuit, the creditors are aiming to nullify these agreements and place OPNX’s assets and profits into a trust.OPNX’s strugglesOPNX has faced difficulties from the point at which it was launched. While Zhu and Davies were once leading figures in the digital assets space, their reputations have been severely tarnished due to the manner of the 3AC collapse and its profound impact on the broader crypto market.In April the platform confirmed backing from various venture capital (VC) entities only for many of the VCs to turn around and deny any such involvement with the project. Having issued an investor and marketplace alert in relation to the firm in April, a short time later the Virtual Asset Regulatory Authority (VARA) in Dubai issued a formal reprimand to the business' founders.VARA followed up in August, applying a $2.7 million fine. OPNX had entered a bid for troubled Singaporean crypto lender Hodlnaut as part of that business restructuring process. The offer was turned down on the basis that the deal involved OPNX’s native OX token, which was deemed to be far too illiquid. A short time later, the OX unit price plummeted.Zhu was arrested in Singapore last month in connection with non-compliance related to 3AC’s bankruptcy, while Davies’ whereabouts remain undisclosed.CoinFLEX’s creditors also accuse Lamb of reaching a settlement agreement with Roger Ver, known as “Bitcoin Jesus.” Ver was one of CoinFLEX’s initial investors but later became entangled in a dispute over an $84 million debt he allegedly incurred on the platform due to market volatility. The lawsuit seeks to recover any benefits Ver received from the settlement.On X, a user called @CoinFLEXReal suggested that it has uncovered evidence that Lamb, Zhu, and Davies “used creditor assets as their personal piggy bank.”

news
Policy & Regulation·

Dec 15, 2023

Banking giants in Turkey embrace crypto ahead of legislative change

Banking giants in Turkey embrace crypto ahead of legislative changeIt remains unclear what the underlying environment for the further development of the crypto sector in Turkey will be until such time as the country introduces a legislative framework to shape the industry’s development. However, that fact is not deterring a couple of Turkey’s leading banks, who have decided to embrace the digital asset realm.Photo by Michael Jerrard on UnsplashStablex acquisitionOn Monday CoinDesk Turkiye reported that the investment arm of Turkish bank Akbank had acquired local crypto company Stablex. Stablex was founded in May 2020 by Jihad Shannak with the objective of providing professional services, including trading relative to cryptocurrencies in Turkey. Majority shareholding passed to Ak Investment in May of this year, with initial negotiations on the sale having commenced in August 2022.A high-ranking official at Ak Investment expressed the group’s ambition to become a pivotal figure in the digital asset realm, signaling a proactive approach to the evolving financial landscape. Akbank also banks the majority of crypto start-ups based in Turkey.Speaking about the acquisition recently, Akbank executive Mert Erdoğmuş stated:“We have invested in Stablex to respond to the need for reliable and innovative service in the cryptocurrency market. Stablex reflects our values with its experience in the sector, pioneering achievements and professional service approach.”BBVA crypto walletAlongside Akbank’s move into the digital assets arena, Garanti BBVA, Turkey’s second largest private bank, recently unveiled its crypto wallet app. The feature-rich application includes a cold wallet, empowering users to seamlessly send and receive assets such as bitcoin (BTC), USD Coin (USDC) and ether (ETH).The pilot project for the app commenced in August, with the application currently available on iOS. In bringing the app to market, the bank created Garanti BBVA Digital Assets, a dedicated subsidiary firm. Commenting on that development back in August, the subsidiary’s Chairman of the Board, M. Çağrı Süzer, stated:”Our research shows that customers significantly value trust in their crypto transactions and especially on its storage. Hence, we are happy to launch our Crypto Custody Wallet addressing these real needs.”Despite uncertainties, Turkey has firmly established itself in the global crypto landscape, ranking among the top 20 countries in Chainalysis’ Global Crypto Adoption Index 2023. The instability of the Turkish lira in recent years has been a driver for crypto adoption in the country. In recent days, the bitcoin unit price has reached its highest exchange rate level against the local sovereign currency.Earlier this week, it emerged that crypto platform Blockchain.com is adding headcount and has its sights set on expansion into Turkey as one of its growth opportunities.FATF-compliant regulatory approachTurkey’s regulatory stance has been to take a cautious approach. In 2021, the central bank restricted the use of crypto for payments, although a complete ban on digital assets was ruled out by officials.Looking ahead, a government official revealed plans for crypto legislation to be presented to Parliament in November. While details remain scarce, this legislative move aligns with Turkey’s broader strategy to exit the Financial Action Task Force’s (FATF) “gray list.”

news
Policy & Regulation·

Sep 01, 2023

Chinese Court Recognizes Virtual Assets as Legal Property

Chinese Court Recognizes Virtual Assets as Legal PropertyAccording to a recent report published by the People’s Courts of the People’s Republic of China, a Chinese court has recognized the legal status of virtual assets, having analyzed their attributes within the framework of Chinese criminal law.The court unequivocally stated that virtual assets are considered legal property under the current legal policy framework and are thus protected by law.The People’s Courts of the People’s Republic of China exercise judicial power independently, free from interference by administrative or public organizations. They have responsibility for adjudicating civil, criminal, and administrative cases.Photo by Christian Lue on UnsplashProperty classificationLocal news source Odaily News reported on the development on Friday, indicating that the report, titled “Identification of the Property Attributes of Virtual Currency and Disposal of Property Involved in the Case,” explicitly recognized the economic attributes of virtual assets, leading to their classification as property.This declaration is particularly significant in light of China’s sweeping ban on decentralized cryptocurrencies. Despite this ban, the report argues that virtual assets held by individuals should enjoy legal protection within the existing policy framework.Furthermore, the report proposed recommendations for addressing crimes involving virtual assets. It emphasized that in cases where money and property are involved, confiscation should be based on the integration of criminal and civil law. The approach taken aims to strike a balance between safeguarding personal property rights while also addressing broader social and public interests.Contentious approach to cryptoWhile China has been making every effort to promote its central bank digital currency (CBDC) and the development of blockchain and metaverse-related technology within the country, its stance on decentralized cryptocurrencies has been contentious at best.Its approach in that respect has been marked by a blanket ban on crypto-related activities such as mining and trading and the prohibition of foreign crypto exchanges from serving customers within mainland China. Nevertheless, Chinese courts have consistently taken a more nuanced view without necessarily contradicting the government’s approach.Differing interpretationsThe divergence between national policy and court rulings first emerged in 2019 when the Hangzhou Internet Court found that Bitcoin is a form of virtual property, and on that basis, it is safeguarded by the law from the point of view of property rights. In May 2022, a Shanghai court affirmed that Bitcoin qualifies as virtual property and, as such, falls under the purview of property rights.Global issueIt’s not just the Chinese courts that are grappling with the issue of clarifying property rights relative to virtual assets. In April of this year, a case in Hong Kong involving defunct crypto exchange Gatecoin resulted in the courts determining that cryptocurrency is property and that on that basis, it’s “capable of being held in trust.”In July a Singaporean court determined that cryptocurrency is capable of being held in trust and on that basis, it should be recognized as property. Earlier this year, the High Court of Justice in London recognized non-fungible tokens (NFTs) as property.The report from the People’s Court reaffirms the legal status of virtual assets as protected property under Chinese law. This development highlights the ongoing divergence between China’s regulatory policy and the judicial interpretation of virtual assets, signaling a potential evolution in the country’s approach to cryptocurrencies.

news
Loading