The world of cryptocurrency is like the Wild West of finance. With so many different independent currencies all held digitally, there’s a lot of space for some tomfoolery. One crypto hacker has committed a gigantic crypto heist, all in the name of some good ol’ fashioned fun.
Reported by Ars Technica, the unnamed crypto hacker breached the security of crypto platform Poly Network. After breaching the company's security, the hacker stole $600 million worth of various currencies. However, it has been stated that there was no ill intention behind the attack.
Crypto Hacker vs Poly Network
The Poly Network heist was announced on Tuesday after $600 million worth of cryptocurrency was stolen. Tokens from multiple different blockchains were taken from the company. $270 million of Ethereum, $250 million from Binance, $84 million from Polygon and other smaller blockchains were targeted.
Since the heist, Poly Network has revealed that the currency is “gradually [being] transferred”. However, it was only due to a massive security flaw with the company's systems that allowed the hack to happen in the first place.
Poly Network revealed that the hacker had exploited a vulnerability from the company. The company said:
“After preliminary investigation, we located the cause of the vulnerability. The hacker exploited a vulnerability between contract calls, exploit was not caused by the single keeper as rumored.”
Just a bit on funsies
After the attack was made public, a Q&A was discovered within the transaction. In the Q&A, the hacker revealed that they didn't particularly care for the massive amount of money they took. The hacker explained:
“When spotting the bug, I had a mixed feeling. Ask yourself what [would you] do had you fac[ed] so much fortune. Ask the project team politely so that they can fix it? Anyone could be the traitor given one billion!”
In the refund transaction, the hacker revealed that returning the $600 million was always the plan. They stated:
“That’s always the plan! I am not very interested in money! I know it hurts when people are attacked, but shouldn’t they learn something from those hacks? Understood the risk of exposing myself even if I don’t do evil. So I used temporary email, IP, or so called fingerprint, which were untracable [sic]. I prefer to stay in the dark and save the world."