The attacker who stole $611M from Poly Network has now returned over $342M in USDC, BTCB, SHIBA, and others, after saying they were “ready to surrender”
Context & Ripple Effects
The reported recovery follows an earlier return of more than $256M, turning the incident from a one-time exploit into a staged negotiation over the remaining assets. Related coverage also records Poly Network offering a $500K bug bounty and joint control of the unrecovered wallet, formalizing that recovery process.
The immediate return matters because it established a path toward restitution rather than a permanent loss; subsequent coverage says Poly Network ultimately recovered all of the stolen crypto and began returning it to owners.
First-order effects
- Poly Network regains control of more than $342M in USDC, BTCB, SHIBA, and other tokens, reducing the assets still outside its custody.
- The attacker’s stated willingness to surrender shifts the dispute from locating stolen tokens to arranging control and return of the remaining balance.
Second-order effects
- Poly Network’s bug-bounty offer and shared-wallet arrangement make negotiated asset recovery a live alternative to relying solely on technical or legal enforcement.
- Users awaiting returned assets depend on Poly Network’s ability to convert recovered custody into an orderly restitution process, rather than merely track the tokens on-chain.
Third-order effects
- The episode points to cross-chain security incidents being managed through a mix of transparent on-chain tracing, custody arrangements, and negotiated recovery, not just irreversible loss.
- If such arrangements become more common, protocol operators may need clearer pre-set policies for bounties, control of recovered wallets, and customer restitution after exploits.
The trend: Major crypto exploits are increasingly testing whether on-chain traceability and negotiated custody can turn thefts into recoverable operational incidents.