Most of Stolen Funds From Poly Network Hack Have Now Been Returned

It was also revealed that Poly had offered a $500,000 reward to the hacker for returning the funds, but that the hacker had declined it.

AccessTimeIconAug 12, 2021 at 11:45 a.m. UTC
Updated Sep 14, 2021 at 1:39 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

The drama around the largest hack in decentralized finance (DeFi) history appears to be coming to an end after the attacker returned most of the stolen funds to a multisig wallet set up by Poly Network, with the exception of the $33 million worth of tether that was frozen by Tether.

  • The latest refund progress was confirmed by Poly Network on Twitter Thursday, although a full recovery of the refunds will still require the attacker to give the final key for the multisig wallet.
  • The DeFi platform, which operates on Binance Smart Chain (BSC), Ethereum and Polygon, was hit by a hack that drained over $600 million in crypto earlier this week. 
  • The hacker began returning the funds on Tuesday to wallet addresses across the three chains. 
  • While it remains a question as to whether the attacker is a true "white-hat" hacker, Poly, which called the attacker "Mr. White Hat," offered $500,000 worth of tokens to him or her as a "legal bounty reward" on Thursday.
  • The attacker, who acknowledged the offer, said he or she never responded to Poly about it and will send all of the money back.
  • Shixing "Discus Fish" Mao, CEO and co-founder of mining pool F2Pool, said in a Weibo post that the negotiation of the refund took about 52 hours and included the participation of several parties including himself, a white-hat hacker named "MR. 600 MILLION," security firm Slowmist and Tether.
  • Slowmist told CoinDesk on Friday that not long after the attack, the company was able to obtain internet protocol addresses (IP) and email addresses associated with the hacker, which may have put some pressure on the hacker to return the funds.
  • Mao said that he will build a monument in Cryptovoxels, a virtual world on Ethereum, to commemorate the "historic" event, which he said has accelerated the development of security in the crypto industry.

UPDATE (August 13, 16:01 UTC): Updated throughout with the latest information and details about the return of the funds.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.

Read more about