Digital Asset
Intelligence
Security Incident · Bridge

Poly Network Trojan horse virus: $10.00M Reported Loss

·Historical incident record

Incident Overview

The Poly Network, a cross-chain interoperability protocol, was attacked again. This attack affected 58 assets on 11 blockchains. According to SlowMist analysis, Poly Network hackers have profited over $10 million worth of mainstream assets. The attackers implanted a Trojan virus into the program compilation environment, allowing them to acquire the consensus keys of Poly Network’s Relay Chain. Subsequently, they utilized these keys to forge cross-chain transactions. The hackers implanted a Trojan horse code block during the program compilation process, obtaining and uploading consensus keys during program startup. They then employed these keys to sign the block header of the forged Poly Network’s Relay Chain, ultimately submitting the forged cross-chain transactions and block header to the target chain to execute the cross-chain exploit.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPermission Stolen
    Reported loss$ 613,062,100.7
  2. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed
  3. Incident date
    Attack methodUnknown
    Reported lossNot disclosed
  4. Incident date
    Target

    Aave fork

    Attack methodGovernance Attack
    Reported loss$ 930,000
  5. Incident date
    Target

    Biswap

    Attack methodContract Vulnerability
    Reported loss$ 710,000