Top

Poly Network Exploit Results in Billions of Nonexistent Tokens

Web3 & Enterprise·July 04, 2023, 12:01 AM

Poly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.

The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.

Photo by Shubham Dhage on Unsplash

 

Network suspension

The Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.

The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.

 

Bridge vulnerabilities

Bridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.

Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.

 

Illiquid Metis tokens

Metis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.

However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.

SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.

Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

More to Read
View All
Policy & Regulation·

Jul 21, 2023

Fraud Defense Sees Terraform Labs Pursue Access to FTX Wallets

Fraud Defense Sees Terraform Labs Pursue Access to FTX WalletsTerraform Labs, the Singapore-based cryptocurrency firm at the center of a lawsuit filed by the United States Securities and Exchange Commission (SEC) in February, is taking steps to bolster its defense against fraud charges.Photo by Anete Lusina on PexelsSubpoena for debtors’ recordsAccording to a motion filed with the FTX bankruptcy court in Delaware on Wednesday, the company is seeking permission from a judge to subpoena data from the bankrupt crypto exchange. The filing shows that Terraform’s legal team is requesting access to information about digital wallets utilized by short sellers between March and May 2022.The company believes that its algorithmic stablecoin’s collapse was not a result of natural market forces but rather a coordinated attack by short sellers, potentially involving Alameda Research, FTX’s sister company.The motion states: “To establish these defenses, TFL needs Debtors’ records about wallets, accounts, and assets used to transact on the FTX International and US exchanges and sales/offers of large volumes of cryptocurrencies developed by TFL, if any, by FTX Trading and West Realm Shires Services Inc. d/b/a FTX US.”Alleged securities fraudThe SEC’s lawsuit, filed on February 16, accuses Terraform Labs and its founder, Do Kwon, of orchestrating a multi-billion dollar crypto asset securities fraud. The regulator alleges that Terraform offered unregistered securities through its algorithmic stablecoin, TerraUSD (UST), and the Terra Luna (LUNA) token. The failure of Terraform in 2022 led to a staggering loss of over $40 billion in the crypto markets.The motion also targets Jump Trading, another entity accused by the SEC of colluding with Terraform to manipulate the price of the UST stablecoin. Jump Trading is facing a separate lawsuit in Illinois in the US, accused of purchasing millions of UST tokens in 2021 as part of an agreement with Terraform to maintain the stablecoin’s peg to $1.“Defendants misrepresented UST’s recovery by claiming that the algorithm was able to restore and maintain the price peg. According to the SEC, UST instead recovered its price peg because Defendants entered an arrangement with a U.S. trading firm, Jump Trading, […] to purchase substantial amounts of UST to support the price,” reads the court filing.Jurisdictional argumentsAside from its pursuit of FTX’s data, Terraform is also seeking to dismiss a class-action lawsuit in California, having already sought to have the SEC lawsuit dismissed. The company argues that since it is based in Singapore, US securities laws referenced in the lawsuit are not applicable to its foreign-developed protocols.Using a similar jurisdictional argument, Do Kwon also tried to conceal documents held in Singapore by the Singaporean company from the SEC, but he failed in that endeavor.Another significant development at Terraform has seen a new CEO appointed to lead the troubled company. According to a report in the Wall Street Journal on Wednesday, Chris Amani, who has been acting as Terraform’s Chief Operating Officer and Chief Financial Officer up until now, has been appointed as CEO.

news
Web3 & Enterprise·

Jul 01, 2023

Hong Kong Insurer Expands Into Digital Assets

Hong Kong Insurer Expands Into Digital AssetsOneDegree, a leading virtual insurer in Hong Kong, has successfully raised US$55 million in its latest funding round to support the expansion of its digital assets insurance portfolio, according to an announcement made by the company on Thursday.The round saw participation from existing investors such as Gobi Partners, Sun Hung Kai, and Bitrock, as well as new investors. This marks OneDegree’s fifth fundraising effort since its establishment in 2016 and brings its total funds raised to over US$97 million. $28 million of this Series B round had been raised in 2021.Digital asset insurance will be offered under the name “OneInfinity” by the firm in partnership with global insurance behemoth Munich Re. The product is being targeted at digital asset trading platforms, custodians, asset managers, and technology providers. While the company doesn’t insure DeFi projects right now, it aspires to do so in the future.Photo by Kindel Media on PexelsLeading Hong Kong online insurerAs one of the four purely online insurers licensed by the Hong Kong Insurance Authority, OneDegree is at the forefront of the authority’s push to integrate technology into the insurance sector to enhance services and reduce costs. The company is not permitted to hire agents, and all sales must be conducted online or through mobile apps.Alvin Kwock Yin-lun, Co-Founder of OneDegree and former JPMorgan banker, expressed his gratitude for the strong support received during this challenging fundraising environment. Kwock attributed the successful round to the company’s robust revenue growth in various insurance segments, including pet, home, fire, medical, and digital assets coverage. He expects OneDegree to achieve profitability next year.Digital asset insurance importanceHighlighting the importance of digital asset insurance, Kwock pointed out that in 2022, approximately US$3.8 billion worth of digital assets were compromised globally, out of a total global cryptocurrency market capitalization of US$1 trillion. He estimated that the market for digital asset insurance premiums would surpass US$1 billion annually in the coming years.To capitalize on this growing demand, OneDegree has been focusing on providing insurance coverage to virtual asset trading platforms and operators. The company introduced its cryptocurrency insurance by offering a HK$100 million cover to Hong Kong Digital Asset Exchange in November 2021.Kwock emphasized that the recent regulatory regime introduced by the Securities and Futures Commission (SFC) on June 1 will further drive the demand for digital asset insurance. He believes OneDegree is well-positioned to offer comprehensive coverage for the risks faced by digital asset operators, as the company possesses the necessary expertise and experience.Looking ahead, OneDegree plans to expand its presence across Asia and offer innovative products such as InsurTech and cybersecurity software-as-a-service solutions.OneDegree’s expanding presence in Asian markets relative to digital assets is to be welcomed. The digital assets space has had its fair share of collapses that may have been prevented with the involvement of a digital asset insurance specialist, and failing that, the application of such a product would naturally prevent losses suffered by market participants.

news
Policy & Regulation·

Sep 18, 2023

Korbit Report: SEC Commissioner Shares Insights on Crypto Regulation

Korbit Report: SEC Commissioner Shares Insights on Crypto RegulationKorbit Research Center, a division of South Korea’s cryptocurrency exchange Korbit, on Monday, released a report that provides a comprehensive summary of its interview with Hester M. Peirce, a Republican Commissioner at the US Securities and Exchange Commission (SEC), which took place on August 18. The interview was conducted by Peter Chung, the head of research at Korbit Research Center.Photo by Joshua Hoehne on UnsplashKorbit’s meeting with US crypto expertsIn August, Chung made a trip to the United States, where he met with prominent figures and companies within the cryptocurrency industry to gain a deeper understanding of the ongoing institutionalization of cryptocurrencies in the United States. Through this opportunity, Korbit intends to release a series of reports that will encapsulate the valuable insights garnered during these interactions in the US.His first interviewee of the series was Commissioner Peirce, who serves as one of the five commissioners at the SEC. These commissioners are appointed by the President of the United States with the confirmation of the US Senate. To maintain political balance and impartiality, it is mandated that no more than three commissioners belong to the same political party.Peirce assumed her role as a Commissioner at the US Securities and Exchange Commission (SEC) in January 2018, following her appointment by President Trump. Before her tenure at the SEC, she held the position of Senior Counsel on the United States Senate Committee on Banking, Housing, and Urban Affairs. She is known as an advocate for technological innovation.Token safe harbor proposalPeirce earned the nickname “Crypto Mom” due to her advocacy for encouraging innovation within the cryptocurrency industry through the implementation of reasonable regulations. One notable initiative that exemplifies her perspective is the token safe harbor proposal. This proposal suggests giving blockchain network developers a three-year grace period during which they can work on building a decentralized network while being exempted from complying with the registration rules of federal securities laws, as long as certain conditions are met.During the interview, Peirce expressed concerns about recent actions taken by the SEC, which have added to the uncertainty surrounding cryptocurrency regulations. She also emphasized the need for swift legislative action to establish a framework for cryptocurrency regulation. Peirce noted that there appears to be a tendency to prioritize the classification of virtual assets over investor protection.Suggestions for KoreaAlthough Peirce hasn’t engaged in any direct interactions with Korean regulators, she suggested the Korean government optimize regulations for its own cryptocurrency industry. Her suggestion was to minimize unnecessary intervention and instead foster an environment where the sector can naturally evolve in accordance with the principles of a free-market economy.Furthermore, Peirce delved into detailed discussions on three pivotal topics: the classification of virtual assets as securities, the need for disclosure requirements, and the significance of assessing the extent of decentralization within a network.Classification of cryptocurrenciesThe Commissioner said that it is inappropriate for the SEC to contend that most cryptocurrency projects should fall under its regulatory purview. The SEC’s argument is based on the assertion that cryptocurrencies may constitute securities because they function as a medium of value exchange in fundraising activities, much like investment contracts in traditional financial markets. Despite this, she expressed optimism regarding the recent US court’s ruling on the Ripple vs. SEC case, which she believes may help rectify misconceptions surrounding the classification of investment contracts.Balancing investor protection and investor choiceMeanwhile, she expressed her viewpoint that regulations aimed at protecting investors should stay true to the disclosure principles introduced back in 1934 when the SEC was first established. However, she also argued that the SEC should avoid imposing arbitrary restrictions on investors’ choices. During the initial phases of a cryptocurrency project, there tends to be an inherent information asymmetry between crypto project leaders and individual investors. To ensure a fair investment environment, she advocated for legal mandates for disclosure. Notably, both her token safe harbor proposal and the Responsible Financial Innovation Act proposed by US Senators Kirsten Gillibrand and Cynthia Lummis incorporate such disclosure requirements.Decentralization assessmentCommissioner Peirce also approached the assessment of decentralization with a thoughtful perspective. Her Token Safe Harbor Proposal 2.0 states that after the three-year grace period, “token transactions may not constitute securities transactions if the network has matured to a functioning or decentralized network.” However, she admitted to grappling with the challenge of precisely defining what constitutes sufficient decentralization. During the conversation, she sought Mr. Chung’s perspective on this matter. In response, Mr. Chung shared that the Korbit Research Center regularly conducts measurements and assessments of the degree of decentralization for major blockchain networks every six months.Regarding the interview, Peter Chung expressed his admiration for the high-ranking official’s openness to innovation and strong communication skills. He also voiced his hope for more open discussions in Korea that could promote sustainable growth of the country’s crypto industry.

news
Loading