The Poly Network hack was not a slow-burn exploit. Blockchain analytics firm Chainalysis dated the attack to August 10, 2021 and valued the stolen cryptocurrency at $612 million. For related coverage, see Liquid Network Reportedly Halted After Alleged BTC Withdrawal.
Poly Network theft · August 10, 2021
$612 million
How the Poly Network hack unfolded across three chains
The attacker did not brute-force a wallet. According to Chainalysis, the exploit targeted the smart contracts Poly Network used to carry out cross-chain transactions, the very plumbing that let assets move between blockchains. For related coverage, see Crypto Industry Update: Winners, Losers and Market Tensions | August 31, 2026.
That design made the blast radius enormous. Chainalysis confirmed attacker-controlled addresses spread across Ethereum, Binance Smart Chain and Polygon, turning a single flaw into a multi-chain drain. For related coverage, see Crypto Industry Update: Winners, Losers and Market Tensions | Afternoon, August 31, 2026.
The exact size of the haul depends on who was counting. Different readable reports pegged the loss at roughly $600 million to $612 million, so the widely cited $610 million figure is best read as an approximation rather than an exact, independently verified total.
The chaos was public and immediate. The Chainalysis team wrote that “within minutes of the hack, crypto twitter was ablaze with updates from countless industry operators, reporters, and anonymous sleuths tracking the attacker’s movement of the funds.”
The hacker starts returning the stolen crypto
Then the story flipped. According to Chainalysis, the attacker began returning funds to three Poly Network addresses on August 11, 2021, one day after the theft.
The pressure was on from every direction. BBC News reported that Poly Network urged exchanges to block deposits of the stolen coins and publicly asked the attacker to return the assets, framing the theft as a major economic crime.
The industry mobilized fast. BBC News reported that Binance CEO Changpeng Zhao said the exchange was coordinating with security partners to help, while cautioning there were no guarantees, per the BBC’s August 11 report.
By the next day, most of the money was back. As of 12:45 PM ET on August 12, 2021, Chainalysis reported $578.6 million returned out of the initial haul, with 33.4 million USDT frozen.
Funds returned · August 12, 2021
$578.6 million
Not everything moved back untouched. Chainalysis traced how the attacker sent 673,227 DAI and 96,389,444 USDC to Curve, minted 95,269,796 3CRV tokens, then burned them within an hour to receive 96,942,061 DAI.
Why the elaborate shuffle? Chainalysis suspected the swap out of USDC into DAI was an attempt to reduce the risk of the stolen funds being frozen, though the firm presented that as its interpretation, not a confirmed statement of the attacker’s intent.
The freeze concern was well founded. Stablecoin issuers can and do blacklist addresses, which is exactly what happened to the frozen tether, echoing the freeze-and-recover playbook seen when the Liquid Network clawed back thousands of bitcoin after its own breach.
What remains unclear after the Poly Network crypto return
The headline number is tidy. The aftermath is not. The returns Chainalysis documented went to Poly Network-designated addresses, which is not the same as confirmed reimbursement landing in individual users’ wallets.
Any precise final recovery total, and whatever balance stayed out of reach, sits outside the August 12 snapshot captured in these reports. The public warning that the theft would be treated as a serious crime came from Poly Network itself, not from a confirmed criminal charge or named suspect.
Cross-chain risk remains front of mind for traders eyeing newer, higher-stakes products like leveraged crypto perpetual futures, and the questions the hack raised about who really controls on-chain funds never fully went away.
So the question that made this heist legendary still lingers: when a thief can lift $610 million and hand almost all of it back in 48 hours, what does that say about who truly holds the keys to crypto?
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
