Security News

Poly Network says it's got pretty much all of that $610m in stolen crypto-coins back
2021-08-23 22:37

Poly Network says virtually all of the crypto-currency funds, valued at $610m, stolen from it by a thief have been returned. The thief, dubbed Mr White Hat by Poly Network, promised to hand the funds back, claiming it was just done for fun and to highlight the security flaw.

S3 Ep46: Copyright scams, video snooping and Grand Theft Crypto [Podcast]
2021-08-19 18:55

An IoT bug that could be exploited for video snooping and more. A hacker steals $600m and then makes a song and dance out of giving it back.

Phishing attacks increase in H1 2021, sharp jump in crypto attacks
2021-08-19 04:30

Overall, the first half of 2021 shows a 22 percent increase in the volume of phishing attacks over the same time period last year, PhishLabs reveals. The impact of phishing attacks in H1 2021 Crypto is fully in attackers' sights: This category experienced an increase of phishing attacks 10 times greater than the previous quarter in 2021.

SIM swap scammer pleads guilty to Instagram account hijacks, crypto theft
2021-08-16 15:27

Declan Harrington, a Massachusetts man charged two years ago for his alleged involvement in a series of SIM swapping attacks, pleaded guilty to stealing cryptocurrency from multiple victims and hijacking the Instagram account of others. Harrington was charged with Eric Meiggs in November 2019 for targeting the owners of high-value Instagram and Tumblr accounts.

I was offered $500k as a thank-you bounty for pilfering $600m from Poly Network, says crypto-thief
2021-08-14 10:03

The mysterious miscreant who exploited a software vulnerability in Poly Network to drain $600m in crypto-assets, claims the Chinese blockchain company offered them $500,000 as a reward for discovering the weakness. "We appreciate you sharing your experience and believe your action constitutes white hat behaviour ... Since, we believe your action is white hat behaviour, we plan to offer you a $500,000 bug bounty after you complete the refund fully," the thief wrote in their transaction metadata, seemingly quoting or paraphrasing a message received from Poly Network.

Hacker Dubbed 'Mr White Hat' to Return Entire Stolen Crypto Fortune
2021-08-12 17:57

A firm specializing in transferring cryptocurrency said Thursday that a hacker they are calling "Mr White Hat" was giving back all $613 million in digital loot from a record haul. The hacker said the heist was pulled "For fun" to expose a flaw that could have cost Poly Network dearly and undermined faith in cryptocurrencies.

The Curious Case of the $600 Million Crypto Heist
2021-08-12 11:48

Cryptocurrency investors have been transfixed over the past few days by the antics of a mysterious hacker who stole more than $600 million - before giving some of it back. The hacker struck Poly Network, a company that handles cryptocurrency transfers, on Tuesday in one of the biggest thefts of digital monies in history.

Thief hands back at least a third of $600m in crypto-coins stolen from Poly Network
2021-08-11 23:18

Whoever drained $600m in cryptocurrencies from Poly Network is said to have returned at least $260m so far. Poly Network said the crook was able to interfere with the execution of smart contracts - typically, small programs that automatically run to fulfill agreements between parties - that are used by the platform to exchange people's tokens and coins.

Hackers Return Portion of Record Crypto Heist Haul
2021-08-11 18:07

A firm specializing in transferring cryptocurrency said that hackers have given back $260 million worth of digital loot from a record haul. Poly Network fired off a tweet Wednesday saying hackers had returned $260 million worth of the digital assets taken in a heist a day earlier valued at $613 million.

Crypto Hack Earned Crooks $600 Million
2021-08-11 15:12

Attackers reportedly stole $600 million from the cryptocurrency platform Poly Network, in what experts say is one of the largest crypto heists to date. Poly Network, a decentralized finance platform based in China, publicly acknowledged that an attacker "Exploited a vulnerability" that allowed them to assign themselves the ownership of money processed through the platform.