Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Hacker Dubbed ‘Mr White Hat’ to Return Entire Stolen Crypto Fortune

A firm specializing in transferring cryptocurrency said Thursday that a hacker they are calling “Mr White Hat” was giving back all $613 million in digital loot from a record haul.

Poly Network had put out word previously that nearly half of the digital assets swiped early this week had been returned.

A firm specializing in transferring cryptocurrency said Thursday that a hacker they are calling “Mr White Hat” was giving back all $613 million in digital loot from a record haul.

Poly Network had put out word previously that nearly half of the digital assets swiped early this week had been returned.

“As our communication with Mr. White Hat is going on, the remaining user assets on Ethereum are gradually transferred,” Poly Network said in a tweet.

“We look forward to Mr. White returning all the remaining user assets, as stated by him.”

Polygon had urged the thief to return the stolen fortune.

A person claiming to be the hacker told their side of the story in a question-and-answer style post on Twitter.

The hacker said the heist was pulled “for fun” to expose a flaw that could have cost Poly Network dearly and undermined faith in cryptocurrencies.

“I would say figuring out the blind spot in the architecture of Poly Network would be one of the best moments in my life,” the post read.

Advertisement. Scroll to continue reading.

“To be honest, I did have some selfish motives to do something cool but not harmful… then I realized being the moral leader would be the coolest hack I could ever archive.”

The return of the digital loot came as the thief was tracked by “white hat” hackers who use their software skills for good.

Their nefarious counterparts are referred to as “black hat” hackers in the cyber security world.

The heist had sparked debate about whether it would be fair to let the hacker keep some of the loot as reward for uncovering a Poly Network security weakness.

Open source developers alliance BinomialPool in a tweeted exchange proposed a bounty of 5 percent to 10 percent for pulling off such crypto-hacks.

“This could be a win-win,” tweeted @BinomialPool.

“Hackers don’t go into jail. The community faces acceptable losses. Code gets better.”

In an exchange on Twitter, Poly Network promised to pay a $500,000 bug bounty after the stolen assets are returned.

Poly Network also assured the hacker they would not be held accountable.

“We think this behavior is white hat behavior, therefore this 500,000 USD will be seen as completely legal bounty reward,” Poly Network said in the exchange.

Paying hackers bounties for uncovering and reporting bugs in software is common practice in the tech world.

Early on, Poly Network threatened police involvement, but also offered the hacker a chance to “work out a solution.”

The purported hacker said in the post that returning the digital haul was always the plan.

“I know it hurts when people are attacked, but shouldn’t they learn something from those hacks,” the post maintained.

The US Department of Justice and FBI did not respond to requests for comment.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

People on the Move

Gigamon has promoted Tony Jarjoura to CFO and Ram Bhide has been hired as Senior VP of engineering.

Cloud security firm Mitiga has appointed Charlie Thomas as Chief Executive Officer.

Cynet announced the appointment of Jason Magee as Chief Executive Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.