Share this article

Most of Stolen Funds From Poly Network Hack Have Now Been Returned

It was also revealed that Poly had offered a $500,000 reward to the hacker for returning the funds, but that the hacker had declined it.

Updated Sep 14, 2021, 1:39 p.m. Published Aug 12, 2021, 11:45 a.m.
jwp-player-placeholder

The drama around the largest hack in decentralized finance (DeFi) history appears to be coming to an end after the attacker returned most of the stolen funds to a multisig wallet set up by Poly Network, with the exception of the $33 million worth of tether that was frozen by Tether.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

  • The latest refund progress was confirmed by Poly Network on Twitter Thursday, although a full recovery of the refunds will still require the attacker to give the final key for the multisig wallet.
  • The DeFi platform, which operates on Binance Smart Chain (BSC), Ethereum and Polygon, was hit by a hack that drained over $600 million in crypto earlier this week.
  • The hacker began returning the funds on Tuesday to wallet addresses across the three chains.
  • While it remains a question as to whether the attacker is a true "white-hat" hacker, Poly, which called the attacker "Mr. White Hat," offered $500,000 worth of tokens to him or her as a "legal bounty reward" on Thursday.
  • The attacker, who acknowledged the offer, said he or she never responded to Poly about it and will send all of the money back.
  • Shixing "Discus Fish" Mao, CEO and co-founder of mining pool F2Pool, said in a Weibo post that the negotiation of the refund took about 52 hours and included the participation of several parties including himself, a white-hat hacker named "MR. 600 MILLION," security firm Slowmist and Tether.
  • Slowmist told CoinDesk on Friday that not long after the attack, the company was able to obtain internet protocol addresses (IP) and email addresses associated with the hacker, which may have put some pressure on the hacker to return the funds.
  • Mao said that he will build a monument in Cryptovoxels, a virtual world on Ethereum, to commemorate the "historic" event, which he said has accelerated the development of security in the crypto industry.

UPDATE (August 13, 16:01 UTC): Updated throughout with the latest information and details about the return of the funds.

Read more: $600M Poly Heist Shows DeFi Needs Hackers to Become Unhackable

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Bitcoin Treads Water Near $90K as Bitfinex Warns of 'Fragile Setup' to Shocks

Bitcoin (BTC) price on December 8 (CoinDesk)

BTC's relative weakness compared to stocks points to tepid spot demand, making the largest crypto vulnerable to macro volatility, Bitfinex analysts said.

What to know:

  • Bitcoin erased very modest overnight gains early Monday and spent the rest of the U.S. session in a tight range around the $90,000 level.
  • Rising long bond yields and a small U.S. equities pulling back weighed on risk appetite as traders eye this week's Federal Reserve meeting.
  • Bitfinex analysts pointed out bitcoin's relative weakness against U.S. stocks amid modest spot demand and structural softness.