Still, on the largest DeFi hack story, the hacker has stated that Poly Network offered him a bounty but he has not responded and instead will send back all of their money.
The hacker who stole $610 million from the Poly Network cross-chain decentralized finance (DeFi) protocol has returned virtually all of the funds, claiming their activities were “white hat activity.”
According to a Thursday update from Poly Network on the incident, all of the $610 million in cash stolen through an exploit that exploited a “vulnerability between contract calls” has now been transferred to a multisig wallet held by the project and the hacker.
The only remaining tokens are around $33 million in Tether (USDT), which were frozen as soon as the assault was discovered.
Through encoded messages in Ethereum transactions, the hacker communicated with the Poly Network team and others. They claimed to have done the breach “for fun” because “cross-chain hacking is trendy,” but it appears they had no plans to move the monies after successfully taking them.
On Wednesday, however, the hacker refunded $258 million of the funds after meeting with the project and users. Poly Network ruled that the hacking was “white hat behaviour” and offered the hacker, called “Mr. White Hat,” a $500,000 reward:
“We assure you that you will not be accountable for this incident. We hope that you can return all the tokens as soon as possible […] We will send you the 500k bounty when the remainings are returned except the frozen USDT.”
“A bounty was offered by the poly, but I never answered. Instead, I’ll return all of their funds,” the hacker declared.
The biggest hack in decentralized finance appears to be coming to a conclusion now that the remaining funds, with the exception of the frozen USDT, have been refunded.
Though the hacker’s identity hasn’t been revealed, Chinese cybersecurity firm SlowMist issued an update shortly after the news of the breach leaked, claiming that its investigators had tracked down the attacker’s email address, IP address, and device fingerprint.