A decentralised financial network has claimed hackers absconded with about $600 million (€512 million) worth of cryptocurrencies in one of the largest heists in the rapidly growing digital asset industry.
Poly Network, which links some of the world's most widely used digital ledgers, said on Tuesday that attackers had exploited a vulnerability in its system and taken thousands of crypto tokens. The attack would be one of the largest to date on a crypto venture, on a par with major breaches including those of exchanges Coincheck and Mt Gox.
The alleged hack marks a blow to supporters of decentralised finance, or DeFi, which has been one of the fastest-growing areas of the cryptocurrency market.
It also highlights the lack of consumer and investor protections in a market that has boomed in recent years with only light oversight from financial regulators.
Poly Network has developed a computer protocol, or set of rules, that allows users to transfer tokens tied to one blockchain to a different network.
Many of the world's most widely used blockchains, such as Binance Chain and ethereum, have developed independently and their coins, offered as an incentive to users, are run on separate technologies.However it means investors cannot easily move their tokens to a different blockchain, to trade them or use them as collateral for another investment.
Proponents are trying to build networks that allow users to buy and sell digital assets directly with each other, bypassing intermediaries that might impose fees, such as an exchange or clearing house. Many projects aim to be fully decentralised.
The alleged hacker exploited a vulnerability in Poly Network’s “contract calls”, a type of test that is not intended to be published on the blockchain, to access the ledgers and transfer money out, the network said.
The tokens were valued at about $600 million prior to the news of the alleged hack, consisting of more than $270 million on the ethereum blockchain, $250 million on the Binance Smart Chain and $84 million on the Polygon network, according to wallet addresses published by Poly Network on Twitter.
Etherscan indicated the hacker had taken stablecoins such as binance coin and ethereum, as well as coins denominated in dozens of alternative tokens, including shiba inu, matic and uniswap. The dollar value of the stolen coins dropped to $394 million as news of it spread and investors sold some cryptocurrencies, knocking the tokens’ prices.
Poly Network called on groups known as “miners” – which process transactions – and centralised crypto exchanges to help block transfers. “We will take legal actions and we urge the hackers to return the assets,” it said.
Earlier this month Gary Gensler, chairman of the Securities and Exchange Commission, the US markets regulator, called on lawmakers to give watchdogs more powers to protect investors from illicit activity on DeFi platforms. – Copyright The Financial Times Limited 2021
