Poly Network says it has now recovered all of $610M in cryptocurrencies it lost to a hacker, and is in the process of returning them to their rightful owners
One of the most unusual cryptocurrency heists in recent memory has come to a close. On Monday, Poly Network … Source: Poly Network .
Context & Ripple Effects
The incident moved rapidly from the reported theft from Poly Network’s cross-chain protocol to the attacker’s initial return of more than $256M, followed by further transfers and a jointly controlled wallet. Poly Network then offered a $500K bug bounty as the recovery was negotiated.
Recovering the remaining assets changes the episode from containment to restitution: Poly Network now has to return the funds to the owners affected by the breach.
First-order effects
- Poly Network can begin distributing the recovered $610M to the rightful owners, ending the immediate uncertainty over whether the stolen assets would be returned.
- Affected asset owners move from reliance on the attacker’s staged transfers to Poly Network’s return process.
Second-order effects
- Poly Network’s incident-response workload shifts from securing and negotiating the return of assets to verifying claims and executing restitution.
- The $500K bounty becomes part of the record of how Poly Network resolved the breach, alongside the jointly controlled wallet used during the recovery.
Third-order effects
- The episode highlights that a security failure at a cross-chain protocol can leave recovery dependent not only on technical controls but also on off-chain negotiation with an attacker.
- If similar recoveries become a recurring response pattern, DeFi security incidents may be judged as much by protocols’ restitution processes as by whether stolen assets are ultimately recovered.
The trend: Cross-chain DeFi breaches are making post-attack asset recovery and restitution a central part of protocol risk management.