Biggest hack on Defi/Crypto space worth of $600 Million plus from PolyNetwork

[Review Master]

Exploit in defi space is becoming commons as every now and then, we get news of hack/exploit on any defi projects. Previously, biggest exploit amount was $89 million which was drained from compound labs. But this time, the exploit of polynetwork breaks that record as $600 Million plus worth of funds was drained from three different chain including ethereum, binance smart chain and polygon which is now the biggest hack on defi/crypto space.

PolyNetwork officially statement: https://twitter.com/PolyNetwork2/status/1425073987164381196

Here is hacker's wallet address:
Ethereum: https://etherscan.io/address/0xC8a65Fadf0e0dDAf421F28FEAb69Bf6E2E589963
Binance smart chain: https://bscscan.com/address/0x0D6e286A7cfD25E0c01fEe9756765D8033B32C71
Polygon: https://polygonscan.com/address/0x5dc3603C9D42Ff184153a8a9094a73d461663214

Crazy thing is, someone informed hacker throughout transection to not use usdt which is blacklisted and hacker tipeed that address 13.37 eth. After knowing this, everyone's started to spam on his address for free money. Just check the ethereum address of that hacker. More entertainment on those transections. 

Here's the two of those transections:
(1) https://etherscan.io/tx/0xae2442c5b5721df8c190fd8f59b53b6dc56a875fb03035ad34276a598ddf7d31
(2) https://etherscan.io/tx/0xdf3afc47c7914e06ddb1be19afcd769e558111d353e55273a62c4a96e6a6090f

[Review Master]

Updates

Hacker recently did a transection to share a message: https://etherscan.io/tx/0x552bc0322d78c5648c5efa21d2daa2d0f14901ad4b15531f1ab5bbe5674de34f

Code:

IT WOULD HAVE BEEN A BILLION HACK IF I HAD MOVED REMAINING SHITCOINS! DID I JUST SAVE THE PROJECT?
NOT SO INTERESTED IN MONEY, NOW CONSIDERING RETURNING SOME TOKENS OR JUST LEAVING THEM HERE

Btw, it looks like the end of this heist as SlowMist already found out the the identity of that hacker according to the news of TheBlockCrypto.

Not only this, one user already found out another wallet address (most probably hackers main wallet) which is tied to binance, ftx, okex.

PloyNetwork tweeted a message for hacker: https://twitter.com/PolyNetwork2/status/1425123153009803267

Another transection: https://etherscan.io/tx/0x4c102e972301b999318df70e3d3a067994dcc83951f07f7f37c45ff7e922beec

Code:

WHAT IF I MAKE A NEW TOKEN AND LET THE DAO DECIDE WHERE THE TOKENS GO

Hacker started returning the stolen funds.

Hacker leave a message on his polygon address for polynetwork team: https://polygonscan.com/tx/0xa64b7bdfdad745efff19224eeaa0d0ebd012be647972a5e949080ba316a89c74

Code:

DONATE TO 0xA87fB85A93Ca072Cd4e5F0D4f178Bc831Df8a00B IF YOU SUPPORT MY DECISION
ENCRYPT YOUR MSG WITH HIS PUBKEY IF YOU WANT TO TALK

Hacker again returned almost $120 million BUSD to polynetwork team on BSC.

Hacker returns almost all funds to PoyNetwork

[ur=https://twitter.com/PolyNetwork2/status/1427574236483231749l]PolyNetwork invites the hacker to be the Chief Security Advisor & won't take any legal action[/url]

Code:

#PolyNetwork has no intention of holding #mrwhitehat     legally responsible and cordially invites him to be our Chief Security Advisor. $500,000 bounty is on the way. Whatever #mrwhitehat chooses to do with the bounty in the end, we have no objections.

Note: Updating thses stuffs as this is the biggest hack in defi/crypto space.  

[dimonstration]

Updates

Hacker recently did a transection to share a message: https://etherscan.io/tx/0x552bc0322d78c5648c5efa21d2daa2d0f14901ad4b15531f1ab5bbe5674de34f

Code:

IT WOULD HAVE BEEN A BILLION HACK IF I HAD MOVED REMAINING SHITCOINS! DID I JUST SAVE THE PROJECT?
NOT SO INTERESTED IN MONEY, NOW CONSIDERING RETURNING SOME TOKENS OR JUST LEAVING THEM HERE

Btw, it looks like the end of this heist as SlowMist already found out the the identity of that hacker according to the news of TheBlockCrypto.

Not only this, one user already found out another wallet address (most probably hackers main wallet) which is tied to binance, ftx, okex.

PloyNetwork tweeted a message for hacker: https://twitter.com/PolyNetwork2/status/1425123153009803267

Another transection: https://etherscan.io/tx/0x4c102e972301b999318df70e3d3a067994dcc83951f07f7f37c45ff7e922beec

Code:

WHAT IF I MAKE A NEW TOKEN AND LET THE DAO DECIDE WHERE THE TOKENS GO

Most the hacking event are those from the bridge project for different blockchain, I think this is still on gray area yet many people are risking money on investing and using this kind of staff. The interoperability on different blockchain seems hard and the project that focusing on it are not that competent and cautious for running there code while there still hiccups that prone for hacking. I think the note of hacker is after he deposit some of the tokens on CEX and he knows he will fck up sooner or later.
Note: Updating thses stuffs as this is the biggest hack in defi/crypto space.

[Bttzed03]

$600 Million+ and I thought the flash loan would be the worst type of attack on DeFi platforms. Another proof that DeFi is still in the early stage and all these projects working on different experiments are very much vulnerable.

Anyone interested to know how it happened - The Root Cause Of Poly Network Being Hacked

I hope none of projects I follow that's also working on blockchain interoperability like Polynetwork suffer the same fate.

[Sithara007]

Crazy thing is, someone informed hacker throughout transection to not use usdt which is blacklisted and hacker tipeed that address 13.37 eth. After knowing this, everyone's started to spam on his address for free money. Just check the ethereum address of that hacker. More entertainment on those transections. 

Yeah.. I could see more than 1,000 spam transactions to the address. But I don't know whether the guy who received 13.37 ETH in his wallet will be able to spend that money. If his address is linked to any exchange wallet, then he will find himself in big trouble. Legally, the authorities can't prosecute him, as he hasn't directly taken part in the hack. But he has received stolen coins and now his past transactions will also be under the scanner. And personally I don't encourage this sort of behavior. Why should anyone help the hackers?

[tbct_mt2]

I hope none of projects I follow that's also working on blockchain interoperability like Polynetwork suffer the same fate.

Convenience comes together with risk.

Interoperability gives more convenience and obviously more risk for people who use those interoperable chains for their transactions. I don't use DeFi or interoperable chains with big transactions.

I don't know what happen behind the scene when I click on Swap. It sounds I am a stupid crypto investor but I use Swap on DeFi for small money. Hack is just one of thing I don't like. Another thing is slippage, with big money, you will get minus point and lose profit when you swap.

[Reid]

Crazy thing is, someone informed hacker throughout transection to not use usdt which is blacklisted and hacker tipeed that address 13.37 eth. After knowing this, everyone's started to spam on his address for free money. Just check the ethereum address of that hacker. More entertainment on those transections. 

Yeah.. I could see more than 1,000 spam transactions to the address. But I don't know whether the guy who received 13.37 ETH in his wallet will be able to spend that money. If his address is linked to any exchange wallet, then he will find himself in big trouble. Legally, the authorities can't prosecute him, as he hasn't directly taken part in the hack. But he has received stolen coins and now his past transactions will also be under the scanner. And personally I don't encourage this sort of behavior. Why should anyone help the hackers?

Correct. He was used as a tool or an acquaintance. That is still punishable by law.
Instead of helping to track him, he was the one who provided the getaway car in terms of stealing.
The attacker insisted it was not about the money. So what is it for?

If I have this kind of gift to think at an awesome level, I'd rather use it for a better crypto industry. What is he thinking? Jail time is not fun at all than being in front of the computer everyday.