Poly Network is a decentralised finance platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains. Reuters
Poly Network is a decentralised finance platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains. Reuters
Poly Network is a decentralised finance platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains. Reuters
Poly Network is a decentralised finance platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains. Reuters

How hackers pulled off the biggest cryptocurrency heist from Poly Network


  • English
  • Arabic

Hackers pulled off the biggest cryptocurrency heist on Tuesday, stealing $613 million in digital coins from token-swapping platform Poly Network, only to return $260m worth of tokens less than 24 hours later, the company said.

Here's what we know so far about the heist.

What is Poly Network?

A lesser-known name in the world of cryptocurrency, Poly Network is a decentralised finance (DeFi) platform that facilitates peer-to-peer transactions with a focus on allowing users to transfer or swap tokens across different blockchains.

For example, a customer could use Poly Network to transfer tokens such as Bitcoin from the Ethereum blockchain to the Binance Smart Chain, perhaps looking to access a specific application.

It was not immediately clear from Poly Network's website where the platform is based or who runs it. According to specialist cryptocurrency website Coindesk, Poly Network was launched by the founders of Chinese blockchain project Neo.

How did hackers steal the tokens?

Poly Network operates on the Binance Smart Chain, Ethereum and Polygon blockchains. Tokens are swapped between the blockchains using a smart contract that contains instructions on when to release the assets to the counterparties.

One of the smart contracts that Poly Network uses to transfer tokens between blockchains maintains large amounts of liquidity to allow users to efficiently swap tokens, according to cryptocurrency intelligence firm CipherTrace.

Poly Network tweeted on Tuesday that a preliminary investigation found the hackers exploited a vulnerability in this smart contract.

The hackers appeared to override the contract instructions for each of the three blockchains and diverted the funds to three wallet addresses (digital locations for storing tokens), according to an analysis of the transactions tweeted by Kelvin Fichter, an Ethereum programmer. These were later traced and published by Poly Network.

It is unlikely that white hat hackers would steal such a large sum. It's hard to know the motivation ... Let's see if they return the whole amount
Gurvais Grigg,
chief technology officer, Chainalysis

The attackers stole funds in more than 12 different cryptocurrencies, including Ether and a type of Bitcoin, according to blockchain forensics company Chainalysis.

A person claiming to have perpetrated the hack said they had spotted a "bug", without specifying, and that they wanted to "expose the vulnerability" before others could exploit it, according to digital messages posted on the Ethereum network published by Chainalysis. Reuters could not verify the authenticity of the messages.

Where did the money go?

As of late Wednesday, the hackers had returned $260m of the assets, Poly Network said, but $353m was outstanding. It is unclear where the remaining assets have gone.

Coindesk reported on Tuesday the hackers had tried to transfer assets including Tether tokens from one of the three wallets into liquidity pool Curve.fi, but that transfer was rejected. About $100m has been moved out of another wallet and deposited into liquidity pool Ellipsis Finance, Coindesk also reported.

Curve.fi. and Ellipsis Finance could not immediately be reached for comment.

Who is the hacker?

The hacker – or hackers – has not yet been identified.

Cryptocurrency security firm SlowMist said on its website it has identified the attacker's mailbox, internet protocol address and device fingerprints, but the company has not yet named any individuals. SlowMist said the heist was "likely to be a long-planned, organised and prepared attack".

Despite the purported hacker posing as a so-called "white hat", an ethical hacker who aimed to identify the vulnerability for Poly Network and had "always" planned to give the money back, according to the messages published by Chainalysis, some cryptocurrency experts are sceptical.

It is unlikely that white hat hackers would steal such a large sum, Gurvais Grigg, chief technology officer at Chainalysis and former FBI veteran, said. They had probably returned some of the funds because it had proved too difficult to convert them into cash, he added.

"It's hard to know the motivation ... Let's see if they return the whole amount," he added.

box

COMPANY PROFILE

Company name: Letstango.com

Started: June 2013

Founder: Alex Tchablakian

Based: Dubai

Industry: e-commerce

Initial investment: Dh10 million

Investors: Self-funded

Total customers: 300,000 unique customers every month

Best Academy: Ajax and Benfica

Best Agent: Jorge Mendes

Best Club : Liverpool   

 Best Coach: Jurgen Klopp (Liverpool)  

 Best Goalkeeper: Alisson Becker

 Best Men’s Player: Cristiano Ronaldo

 Best Partnership of the Year Award by SportBusiness: Manchester City and SAP

 Best Referee: Stephanie Frappart

Best Revelation Player: Joao Felix (Atletico Madrid and Portugal)

Best Sporting Director: Andrea Berta (Atletico Madrid)

Best Women's Player:  Lucy Bronze

Best Young Arab Player: Achraf Hakimi

 Kooora – Best Arab Club: Al Hilal (Saudi Arabia)

 Kooora – Best Arab Player: Abderrazak Hamdallah (Al-Nassr FC, Saudi Arabia)

 Player Career Award: Miralem Pjanic and Ryan Giggs

Pharaoh's curse

British aristocrat Lord Carnarvon, who funded the expedition to find the Tutankhamun tomb, died in a Cairo hotel four months after the crypt was opened.
He had been in poor health for many years after a car crash, and a mosquito bite made worse by a shaving cut led to blood poisoning and pneumonia.
Reports at the time said Lord Carnarvon suffered from “pain as the inflammation affected the nasal passages and eyes”.
Decades later, scientists contended he had died of aspergillosis after inhaling spores of the fungus aspergillus in the tomb, which can lie dormant for months. The fact several others who entered were also found dead withiin a short time led to the myth of the curse.

Jetour T1 specs

Engine: 2-litre turbocharged

Power: 254hp

Torque: 390Nm

Price: From Dh126,000

Available: Now

Volvo ES90 Specs

Engine: Electric single motor (96kW), twin motor (106kW) and twin motor performance (106kW)

Power: 333hp, 449hp, 680hp

Torque: 480Nm, 670Nm, 870Nm

On sale: Later in 2025 or early 2026, depending on region

Price: Exact regional pricing TBA

COMPANY%20PROFILE%20
%3Cp%3E%3Cstrong%3EName%3A%3C%2Fstrong%3E%20Haltia.ai%0D%3Cbr%3E%3Cstrong%3EStarted%3A%3C%2Fstrong%3E%202023%0D%3Cbr%3E%3Cstrong%3ECo-founders%3A%3C%2Fstrong%3E%20Arto%20Bendiken%20and%20Talal%20Thabet%0D%3Cbr%3E%3Cstrong%3EBased%3A%3C%2Fstrong%3E%20Dubai%2C%20UAE%0D%3Cbr%3E%3Cstrong%3EIndustry%3A%3C%2Fstrong%3E%20AI%0D%3Cbr%3E%3Cstrong%3ENumber%20of%20employees%3A%3C%2Fstrong%3E%2041%0D%3Cbr%3E%3Cstrong%3EFunding%3A%3C%2Fstrong%3E%20About%20%241.7%20million%0D%3Cbr%3E%3Cstrong%3EInvestors%3A%3C%2Fstrong%3E%20Self%2C%20family%20and%20friends%26nbsp%3B%3C%2Fp%3E%0A
Red flags
  • Promises of high, fixed or 'guaranteed' returns.
  • Unregulated structured products or complex investments often used to bypass traditional safeguards.
  • Lack of clear information, vague language, no access to audited financials.
  • Overseas companies targeting investors in other jurisdictions - this can make legal recovery difficult.
  • Hard-selling tactics - creating urgency, offering 'exclusive' deals.

Courtesy: Carol Glynn, founder of Conscious Finance Coaching

Cinco in numbers

Dh3.7 million

The estimated cost of Victoria Swarovski’s gem-encrusted Michael Cinco wedding gown

46

The number, in kilograms, that Swarovski’s wedding gown weighed.

1,000

The hours it took to create Cinco’s vermillion petal gown, as seen in his atelier [note, is the one he’s playing with in the corner of a room]

50

How many looks Cinco has created in a new collection to celebrate Ballet Philippines’ 50th birthday

3,000

The hours needed to create the butterfly gown worn by Aishwarya Rai to the 2018 Cannes Film Festival.

1.1 million

The number of followers that Michael Cinco’s Instagram account has garnered.

EPL's youngest
  • Ethan Nwaneri (Arsenal)
    15 years, 181 days old
  • Max Dowman (Arsenal)
    15 years, 235 days old
  • Jeremy Monga (Leicester)
    15 years, 271 days old
  • Harvey Elliott (Fulham)
    16 years, 30 days old
  • Matthew Briggs (Fulham)
    16 years, 68 days old
UAE tour of the Netherlands

UAE squad: Rohan Mustafa (captain), Shaiman Anwar, Ghulam Shabber, Mohammed Qasim, Rameez Shahzad, Mohammed Usman, Adnan Mufti, Chirag Suri, Ahmed Raza, Imran Haider, Mohammed Naveed, Amjad Javed, Zahoor Khan, Qadeer Ahmed
Fixtures:
Monday, 1st 50-over match
Wednesday, 2nd 50-over match
Thursday, 3rd 50-over match

COMPANY PROFILE
Name: Kumulus Water
 
Started: 2021
 
Founders: Iheb Triki and Mohamed Ali Abid
 
Based: Tunisia 
 
Sector: Water technology 
 
Number of staff: 22 
 
Investment raised: $4 million 
Company%20profile
%3Cp%3E%3Cstrong%3ECompany%20name%3A%3C%2Fstrong%3E%20Ogram%3Cbr%3E%3Cstrong%3EStarted%3A%20%3C%2Fstrong%3E2017%3Cbr%3E%3Cstrong%3EFounders%3A%3C%2Fstrong%3E%20Karim%20Kouatly%20and%20Shafiq%20Khartabil%3Cbr%3E%3Cstrong%3EBased%3A%20%3C%2Fstrong%3EDubai%2C%20UAE%3Cbr%3E%3Cstrong%3EIndustry%3A%3C%2Fstrong%3E%20On-demand%20staffing%3Cbr%3E%3Cstrong%3ENumber%20of%20employees%3A%3C%2Fstrong%3E%2050%3Cbr%3E%3Cstrong%3EFunding%3A%20%3C%2Fstrong%3EMore%20than%20%244%20million%3Cbr%3E%3Cstrong%3EFunding%20round%3A%3C%2Fstrong%3E%20Series%20A%3Cbr%3E%3Cstrong%3EInvestors%3A%20%3C%2Fstrong%3EGlobal%20Ventures%2C%20Aditum%20and%20Oraseya%20Capital%3Cbr%3E%3C%2Fp%3E%0A
Dust and sand storms compared

Sand storm

  • Particle size: Larger, heavier sand grains
  • Visibility: Often dramatic with thick "walls" of sand
  • Duration: Short-lived, typically localised
  • Travel distance: Limited 
  • Source: Open desert areas with strong winds

Dust storm

  • Particle size: Much finer, lightweight particles
  • Visibility: Hazy skies but less intense
  • Duration: Can linger for days
  • Travel distance: Long-range, up to thousands of kilometres
  • Source: Can be carried from distant regions
The%20specs
%3Cp%3E%3Cstrong%3EEngine%3A%20%3C%2Fstrong%3E2.0-litre%204-cyl%20turbo%3Cbr%3E%3Cstrong%3EPower%3A%20%3C%2Fstrong%3E190hp%20at%205%2C600rpm%3Cbr%3E%3Cstrong%3ETorque%3A%20%3C%2Fstrong%3E320Nm%20at%201%2C500-4%2C000rpm%3Cbr%3E%3Cstrong%3ETransmission%3A%20%3C%2Fstrong%3E7-speed%20dual-clutch%20auto%3Cbr%3E%3Cstrong%3EFuel%20consumption%3A%20%3C%2Fstrong%3E10.9L%2F100km%3Cbr%3E%3Cstrong%3EPrice%3A%20%3C%2Fstrong%3EFrom%20Dh119%2C900%3Cbr%3E%3Cstrong%3EOn%20sale%3A%20%3C%2Fstrong%3ENow%3C%2Fp%3E%0A
Brief scores:

Toss: Sindhis, elected to field first

Pakhtoons 137-6 (10 ov)

Fletcher 68 not out; Cutting 2-14

Sindhis 129-8 (10 ov)

Perera 47; Sohail 2-18

SPEC%20SHEET%3A%20APPLE%20IPHONE%2015%20PRO%20MAX
%3Cp%3E%3Cstrong%3EDisplay%3A%3C%2Fstrong%3E%206.7%22%20Super%20Retina%20XDR%20OLED%2C%202796%20x%201290%2C%20460ppi%2C%20120Hz%2C%202000%20nits%20max%2C%20HDR%2C%20True%20Tone%2C%20P3%2C%20always-on%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EProcessor%3A%3C%2Fstrong%3E%20A17%20Pro%2C%206-core%20CPU%2C%206-core%20GPU%2C%2016-core%20Neural%20Engine%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EMemory%3A%3C%2Fstrong%3E%208GB%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ECapacity%3A%3C%2Fstrong%3E%20256%2F512GB%20%2F%201TB%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EPlatform%3A%3C%2Fstrong%3E%20iOS%2017%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EMain%20camera%3A%3C%2Fstrong%3E%20Triple%3A%2048MP%20main%20(f%2F1.78)%20%2B%2012MP%20ultra-wide%20(f%2F2.2)%20%2B%2012MP%205x%20telephoto%20(f%2F2.8)%3B%205x%20optical%20zoom%20in%2C%202x%20optical%20zoom%20out%3B%2010x%20optical%20zoom%20range%2C%20digital%20zoom%20up%20to%2025x%3B%20Photonic%20Engine%2C%20Deep%20Fusion%2C%20Smart%20HDR%204%2C%20Portrait%20Lighting%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EMain%20camera%20video%3A%3C%2Fstrong%3E%204K%20%40%2024%2F25%2F30%2F60fps%2C%20full-HD%20%40%2025%2F30%2F60fps%2C%20HD%20%40%2030fps%2C%20slo-mo%20%40%20120%2F240fps%2C%20ProRes%20(4K)%20%40%2060fps%3B%20night%2C%20time%20lapse%2C%20cinematic%2C%20action%20modes%3B%20Dolby%20Vision%2C%204K%20HDR%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EFront%20camera%3A%3C%2Fstrong%3E%2012MP%20TrueDepth%20(f%2F1.9)%2C%20Photonic%20Engine%2C%20Deep%20Fusion%2C%20Smart%20HDR%204%2C%20Portrait%20Lighting%3B%20Animoji%2C%20Memoji%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EFront%20camera%20video%3A%3C%2Fstrong%3E%204K%20%40%2024%2F25%2F30%2F60fps%2C%20full-HD%20%40%2025%2F30%2F60fps%2C%20slo-mo%20%40%20120%2F240fps%2C%20ProRes%20(4K)%20%40%2030fps%3B%20night%2C%20time%20lapse%2C%20cinematic%2C%20action%20modes%3B%20Dolby%20Vision%2C%204K%20HDR%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EBattery%3A%3C%2Fstrong%3E%204441mAh%2C%20up%20to%2029h%20video%2C%2025h%20streaming%20video%2C%2095h%20audio%3B%20fast%20charge%20to%2050%25%20in%2030min%20(with%20at%20least%2020W%20adaptor)%3B%20MagSafe%2C%20Qi%20wireless%20charging%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EConnectivity%3A%3C%2Fstrong%3E%20Wi-Fi%2C%20Bluetooth%205.3%2C%20NFC%20(Apple%20Pay)%2C%20second-generation%20Ultra%20Wideband%20chip%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EBiometrics%3A%3C%2Fstrong%3E%20Face%20ID%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EI%2FO%3A%3C%2Fstrong%3E%20USB-C%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EDurability%3A%3C%2Fstrong%3E%20IP68%2C%20water-resistant%20up%20to%206m%20up%20to%2030min%3B%20dust%2Fsplash-resistant%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ECards%3A%3C%2Fstrong%3E%20Dual%20eSIM%20%2F%20eSIM%20%2B%20eSIM%20(US%20models%20use%20eSIMs%20only)%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EColours%3A%3C%2Fstrong%3E%20Black%20titanium%2C%20blue%20titanium%2C%20natural%20titanium%2C%20white%20titanium%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EIn%20the%20box%3A%20%3C%2Fstrong%3EiPhone%2015%20Pro%20Max%2C%20USB-C-to-USB-C%20woven%20cable%2C%20one%20Apple%20sticker%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EPrice%3A%3C%2Fstrong%3E%20Dh5%2C099%20%2F%20Dh5%2C949%20%2F%20Dh6%2C799%3C%2Fp%3E%0A
The specs: 2018 Renault Koleos

Price, base: From Dh77,900
Engine: 2.5L, in-line four-cylinder
Transmission: Continuously variable transmission
Power: 170hp @ 6,000rpm
Torque: 233Nm @ 4,000rpm
Fuel economy, combined: 8.3L / 100km

Brave CF 27 fight card

Welterweight:
Abdoul Abdouraguimov (champion, FRA) v Jarrah Al Selawe (JOR)

Lightweight:
Anas Siraj Mounir (TUN) v Alex Martinez (CAN)

Welterweight:
Mzwandile Hlongwa (RSA) v Khamzat Chimaev (SWE)

Middleweight:
Tarek Suleiman (SYR) v Rustam Chsiev (RUS)
Mohammad Fakhreddine (LEB) v Christofer Silva (BRA)

Super lightweight:
Alex Nacfur (BRA) v Dwight Brooks (USA)

Bantamweight:
Jalal Al Daaja (JOR) v Tariq Ismail (CAN)
Chris Corton (PHI) v Zia Mashwani (PAK)

Featherweight:
Sulaiman (KUW) v Abdullatip (RUS)

Super lightweight:
Flavio Serafin (BRA) v Mohammad Al Katib (JOR)

The National's picks

4.35pm: Tilal Al Khalediah
5.10pm: Continous
5.45pm: Raging Torrent
6.20pm: West Acre
7pm: Flood Zone
7.40pm: Straight No Chaser
8.15pm: Romantic Warrior
8.50pm: Calandogan
9.30pm: Forever Young

Specs

Engine: Dual-motor all-wheel-drive electric

Range: Up to 610km

Power: 905hp

Torque: 985Nm

Price: From Dh439,000

Available: Now

'Manmarziyaan' (Colour Yellow Productions, Phantom Films)
Director: Anurag Kashyap​​​​​​​
Cast: Abhishek Bachchan, Taapsee Pannu, Vicky Kaushal​​​​​​​
Rating: 3.5/5

Vikram%20Vedha
%3Cp%3E%3Cstrong%3EDirectors%3A%3C%2Fstrong%3E%20Gayatri%2C%20Pushkar%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Hrithik%20Roshan%2C%20Saif%20Ali%20Khan%2C%20Radhika%20Apte%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%C2%A0%3C%2Fstrong%3E3.5%2F5%3C%2Fp%3E%0A
Updated: September 21, 2021, 7:54 AM`