A Person Behind $611M DeFi Hack Reveals Their Identity In Careless Mistake

What Happened: DeFi protocol Poly Network reported a total loss of over $611 million in an exploit earlier today, making it the biggest hack in DeFi history to date.

Important Notice:
We are sorry to announce that #PolyNetwork was attacked on @BinanceChain @ethereum and @0xPolygon Assets had been transferred to hacker's following addresses:
ETH: 0xC8a65Fadf0e0dDAf421F28FEAb69Bf6E2E589963
BSC: 0x0D6e286A7cfD25E0c01fEe9756765D8033B32C71

— Poly Network (@PolyNetwork2) August 10, 2021

The project notified users on Twitter that the compromised funds had been transferred to two wallet addresses on Ethereum ETH/USD and Polygon MATIC/USD.

“We call on miners of affected blockchain and crypto exchanges to blacklist tokens coming from the above addresses,” stated the project.

“We will take legal actions and we urge the hackers to return the assets.”

The stolen assets consisted of $273 million of Ethereum tokens, $253 million in tokens on Binance Smart Chain, and $85 million in USDC on the Polygon network.

O3 swap, a cross-chain liquidity aggregator and partner project was also involved in the exploit, losing $250 million funds as a result of its cross-chain bridge with Poly Network.

Both projects were launched behind the developers of the NEO NEO/USD blockchain, which has often been likened to the Chinese version of Ethereum.

Reports of a potential exploit first emerged when users of O3 Swap reported being unable to deposit and withdraw funds on the cross-link O3 Hub.

O3 Swap has now suspended its cross-chain services, according to an update from its Twitter account.

The Hacker: At the time of writing, blockchain security firm Slowmist said it had tracked down the attackers’ identity, email address, IP address, and fingerprints.

According to Slowmist, the attackers’ funds were funded by trading the privacy coin Monero XMR/USD for Binance Coin BNB/USD, Ethereum, Polygon, and other tokens.

The hacker later sent a transaction with some amount of the stolen funds and a message, "“IT WOULD HAVE BEEN A BILLION HACK IF I HAD MOVED REMAINING SHITCOINS! DID I JUST SAVE THE PROJECT? NOT SO INTERESTED IN MONEY."
He added that was "considering returning some tokens or "just leave them here." 

See also: Best Crypto and DeFi Insurance