News Breaking News

Hackers steal $613m in Massive Cryptocurrency Heist, Return $260m After Legal Threat

A person claiming to have perpetrated the hack said they did it "for fun" and wanted to "expose the vulnerability" before others could exploit it, according to digital messages shared by Elliptic, crypto tracking firm, and Chainalysis.

Hackers behind one of the greatest ever cryptocurrency heists have returned in excess of 33% of $613 million in advanced coins they took, the organization at the center of the hack said on Wednesday.

Poly Network, a decentralized finance platform that facilitates peer-to-peer transactions, said on Twitter that $260 million of the stolen funds had been returned but that $353 million was outstanding.

The organization, which allows users to trade tokens across various blockchains, said on Tuesday it had been hacked and urged the offenders to return the taken assets, threatening legal action.

The Hackers exploited a vulnerability in the digital contracts Poly Network uses to move assets between different blockchains, according to blockchain forensics company Chainalysis.

A person claiming to have executed the hack said they did it “for no particular reason” and needed to “expose the vulnerability” before others could exploit it, according to digital messages shared by Elliptic, crypto tracking firm, and Chainalysis.

It was “always the plan” to return the tokens, the purported hacker wrote, adding: “I am not very interested in money.”

The hackers or hacker have not been identified, and Reuters couldn’t check the validness of the messages.

Tom Robinson, the co-founder of Elliptic, said the decision to return the money might have been prompted by the headaches of laundering stolen crypto on such a scale.

An executive from cryptocurrency firm Tether said on Twitter the organization had frozen $33 million connected with the hack, and executives at other crypto exchanges told Poly Network they would also try to help.

“Even if you can steal crypto-assets, laundering them and cashing out is extremely difficult, due to the transparency of the blockchain and the broad use of blockchain analytics by financial institutions,” said Robinson.

Poly Network didn’t react to requests for more details. It was not immediately where the platform is based, or whether any law enforcement organization was researching the heist.

The size of the theft was comparable to the $530 million in digital coins stolen from Tokyo-based exchange Coincheck in 2018. The Mt. Gox exchange, also based in Tokyo, collapsed in 2014 after losing half a billion dollars in bitcoin.

The Poly Network attack comes as losses from theft, hacks, and fraud related to decentralized finance (DeFi) hit an all-time high, according to crypto intelligence company CipherTrace.

At $600 million, however, the Poly Network theft far outstripped the $474 million in criminal losses CipherTrace said were registered by the whole DeFi area from January to July. The thefts illustrated risks of the mostly unregulated sector and may attract the attention of regulators.

DeFi stages allow gatherings to manage exchanges, ordinarily in digital currency, directly without traditional gatekeepers such as banks or exchanges. The sector has blast in the course of the last year, with the platform currently handling more than $80 billion worth of digital coins.

Proponents of DeFi say it offers people and organizations free access to financial services, arguing that the technology will cut costs and boost economic activity. But technical flaws and weaknesses in their computer code can make them vulnerable to hacks.