Wing launched new bridge but my stuck tx can't process normally like others. Please process my tx.
https://explorer.poly.network/tx/ee3fdc26a8070a0facfa19edbe7e623454029c0e85bee98ef686f379e4da22ff
Lock Proxy contract 0x25 currently saving exactly my withdraw, please process it. All others WBTC withdraw has done by Wing Cross Chain.
To Mr "Hacker"
First of all, we would like to thank blockchain for creating a record of this journey that will last forever. The past two weeks have been a unique experience for both sides. This was not only a vulnerability for us, but also a way to deeper understanding of the crypto world.
We will restore USDC assets today, and restore BTC and ETH assets as soon as possible this week.
After that, we will focus on restoring all functions of the system and strengthening its security. Also, during the next Poly Network mainnet upgrade we plan to compensate the affected users in a fair, creative and crypto-ish manner.
We believe that for most people who love crypto world, this was not a show, but a lesson. We hope that you will continue to follow Poly Network in the future and become one of the core contributors to the protocol.
Poly Network still has a long way to go in the future, but from the very first day we believed that Poly Network is a protocol that belongs to everyone.
POLY NETWORK TEAM
DEAR POLY TEAM,
KEEP CALM AND THIS IS THE HAPPY ENDING! I HAVE TO ADMIT THAT MY WILD OR MAD BEHAVIORS HAVE LED CRISES TO YOUR PROJECT, YOUR TEAM AND EVEN YOUR LIVES. SORRY FOR THE INCONVENIENCE! IT MUST BE ONE OF THE MOST WILD ADVENTURES IN OUR LIVES.
THOUGH OUR COMMUNICATION IS NEVER PERFECT, WE ARE MOVING IN THE SAME DIRECTION: SETTLE DOWN THE MESS AND CHEER UP FOR THE FUTURE. I DIDN'T WANT TO LEAVE THE PROJECT IN RUINS SO I HAD MY PERSONAL PLAN TO TAKE THE RESPOSIBILITY OF SAVING THE PROJECT. MY ACTIONS, WHICH MAY BE CONSIDERED WEIRD, ARE MY EFFORTS TO CONTRIBUTE TO THE SECURITY OF THE POLY PROJECT IN MY PERSONAL STYLE. THE CONSENSUS WAS REACHED IN A PAINFUL AND OBSCURE WAY, BUT IT WORKS. SOME PEOPLE EVEN SUSPECT THAT THE WHOLE STORY IS A PR STUNT.
WHY DO WE FALL? SO WE CAN LEARN TO PICK OURSELVES UP. THIS INCIDENT MUST BE A SERIOUS LESSON TO MANY OF US, OR EVEN THE WHOLE DEFI COMMUNITY. PERSONALLY, I HAVE LEARNT AND PRACTISED A LOT. AND I TRIED TO POINT OUT SOME CRUCIAL FACTS ABOUT THIS CRAZY DEFI WORLD (PLEASE IGNORE MY BAD JOKES SINCE THE BEGINNING), AND HOPEFULLY MY PHILOSOPHY COULD BE INSPIRING, ESPECIALLY TO THOSE GEEKS WHO HAD MISBEHAVED ACCIDENTLY.
MY ACTIONS WERE DETERMINED SINCE I MADE THE FINAL DECISION, WHICH WAS TO MAKE IT PERFECT AND TO BE THE ETERNAL, INCLUDING PUBLISHING THE FINAL KEY TODAY. HOWEVER, ONE THING IS MISSING. DURING ALL THE NEGOTIATION, MY _ONLY_ REQUEST, WHICH WAS ALSO THE ONLY REASON FOR SLOW REFUND, WAS TO UNLOCK THE USDT. IN MY SELFISH VIEW, THE STORY IS TAINTED BY THE LOCKED USDT. IT WOULD HAVE BEEN A PERFECT EXAMPLE OF BUILDING TRUST BETWEEN ANONYMOUS "ADVERSARIES" BY LEVERAGING THE POWER OF SMART CONTRACT, IF WE HAD ANY CHANCE TO DEAL WITH THE USDT IN A NOT CENTRALIZED WAY. IT WAS JUST MY PREFERENCE OF SOLVING THE USDT ISSUE, AND IT MIGHT NEVER HAPPEN DUE TO THE UNSYNCHRONIZED COMMUNICATION. IT'S FAIR ENOUGH TO JUST LEAVE THE USDT HERE AS A SIN OF UNTRUST. WE DON'T HAVE TO WORRY ABOUT THE IMPERFECTIONS, BECAUSE THE COMMUNITY, THE MEDIA, THE CROWD AND YOU AND ME CAN'T WAIT FOR THE FINAL KEY, RIGHT? HERE IS THE KEY FOR _US_:
d3c0196b81dba3c2811c0a39536e4dc47d640e3099a9331821d40fd1d6ab66fb
I'M QUITING THE SHOW. BELIEVE IT OR NOT, I HAVE NEVER CONSIDERED THE SHARED WALLET AS THE "HOSTAGE" FOR RANSOM. AS YOU MAY HAVE NOTICED, I HAVE POURED YOUR BOUNTY AND MY COMPENSATION FUND FROM DONATIONS INTO THE SHARED MULTISIG WALLET. NOT SURE IF IT'S CONVENIENT, BUT DISTRIBUTING THE EXTRA ASSETS TO THE "SURVIVORS" WOULD BE THE LAST REQUEST FROM THIS MAN.
YOUR CHIEF SECURITY ADVISOR
We hope to clarify with you the situation with regards to unlocking USDT assets. In order to ensure the transparency of information, we have compiled our actions related to USDT assets. We have been maintaining close communication with Tether and referring to their standard procedures, so it was not until last night that Tether let us know the final solution:
(Aug-10-2021 12:30 PM +UTC) Poly Network reports issue to Tether team
(Aug-10-2021 01:40 PM +UTC) Tether team freezes $USDT on 0xC8a65Fadf0e0dDAf421F28FEAb69Bf6E2E589963
(Aug-12-2021 02:20 PM +UTC) Poly Network starts discussing with Tether team the procedure for tokens reissuance
(Aug-12-2021 05:38 PM +UTC) Poly Network sends "we are discussing with tether team about the locked usdt." tx:0x6c4dbf770b84d97fef3a1088cfa92f1af724dabfdbd43839b82bc9bc80b7f1c4
(Aug-13-2021 04:30 PM +UTC) Tether provides formal instructions regarding how to recover USDt tokens
(Aug-19-2021 03:50 PM +UTC) Tether asks Poly Network to confirm that 0x71 multisig address is correct to return USDT to Poly Network
(Aug-19-2021 06:00 PM +UTC) Poly Network confirms the address and further coordinate with Tether remaining steps.
Thank you for assisting us in returning DAI assets. We will restore USDC assets as soon as possible and begin preparations for the restoration of wBTC and ETH assets.
Poly Network does not have own token, and it does not charge users or projects any fees. As an independent project, we have no budget apart from grants from establishing members. Maybe in the future we will have a bigger budget after fund raising, but currently this 160 ETH (500k USD) bounty is a considerable amount for our team. We did not want to make fun of anyone, we just wanted to build a good product. By giving the bounty we want to express our gratitude, because security has always been our top priority.
There were some misunderstandings in the last 10 days because a lot of things were happening. Hope we will have a more efficient communication and never lose synchronization in the future.
DEAR POLY,
GLAD TO SEE THAT YOU ARE MOVING THINGS TO THE RIGHT DIRECTION! YOUR ESSAYS ARE VERY CONVINCING WHILE YOUR ACTIONS ARE SHOWING YOUR DISTRUST, WHAT A FUNNY GAME. YOU DON'T EVEN THINK TO UNLOCK MY USDT ACCOUNT.
I AM NOT READY TO PUBLISH THE KEY IN THIS WEEK. IF YOU ARE WORRY ABOUT THE INTEREST, I COULD SIGN THE TRANSACTION OF DAI TOKEN TO THE PREVIOUS MULTISIG WALLET, THEN YOU CAN DEPOSIT THE STABLES LIKE WHAT I DID LAST WEEK. NOW IT'S THE SAME SITUATION WITH A FEW DAYS AGO: IF YOU TRUST ME, YOU CAN HAVE A GOOD REST AND FOCUS ON THE REPAIRING AND RESTORING PROCESS. HERE IS ONE THING THAT YOU CAN ALWAYS TRUST ME: HOLDING BTC & ETH IS BETTER THAN TRADING THEM.
Greetings Mr. White Hat.
In the light of the ideas that you have shared on public forums, we feel that you share the same vision as Poly Network - to build a secure, transparent, and decentralized protocol in the blockchain world. If we can figure out a way to move forward together, this could turn into a unique experiment for the industry. We think the first step in this collaboration can be to use the previously mentioned 160 ETH Bounty as a safety fund, managed using an address attributed to you (e.g. 0xA87fB85A93Ca072Cd4e5F0D4f178Bc831Df8a00B ?) to reward those who make outstanding contributions to the industry's security in the future.
Blockchain is a whole new world, but in a short time span has made itself relevant to many people's lives. Since this incident first occurred, our team has been working around the clock to restore normal operations to Poly Network as soon as possible. There are many projects and users using Poly Network services and we want to minimize the impact on them. Hence, a secure method to swiftly restore our network is currently our top priority. The assets in Poly Network do not belong to us, but to the users, and we have felt the panic of many users who are concerned about the loss of asset rights. We hope you can provide us with your private key to help us restore the assets of affected users as soon as possible and alleviate the panic.
We as a group also have our own beliefs and ideas about blockchain, which is why we launched Poly Network. We firmly believe that blockchain isn't just limited to being a new technology, but also a fresh concept and a whole new method of collaboration. We hope Poly Network can become a part of the Web 3.0 infrastructure and facilitate interoperability for different ledgers in the future blockchain world. Before this incident, we decided to upgrade Poly Network to a completely decentralized network, which will be a major upgrade on Poly Network after about two months. Here's a link to the code- https://github.com/polynetwork/Zion. In this new upgrade, we have worked on a new network consensus mechanism, the protocol architecture and the token economy model. We planned on announcing this on August 18 2021, the first anniversary of Poly Network's mainnnet launch, and were prepared for the entire campaign. So, you can rest assured that we are, in fact, moving towards a common goal.
Poly Network is a complex system. Interoperability between heterogeneous chains is a new venture, and we need time in order to finish up the new upgrade. After this upgrade goes live, the new Poly Network will operate in a decentralized fashion. We understand your concerns, and so we propose modifying the privileges to a multisignature mechanism for relay chain verifiers that would finally determine the upgrade.
No good protocol is built overnight, and we built Poly Network with the goal of building a protocol that belongs to everyone. That is the philosophy with which we entered this blockchain world in the first place. So we encourage more people that share our vision to join us, and we very much hope you will participate in the decentralization process of Poly Network and contribute to protocol security by playing an important role within Poly Network in the future.
Perhaps the current version of Poly Network is not perfect from a decentralization point of view, but we hope you understand our plans for the project, and the anxiety on part of the users. We believe that after we leave this incident behind, you can join the Poly Network team to discuss future upgrade plans, not just from a security perspective, but also weighing in on more aspects so that we can make Poly Network a better, secure, and more open system together.
Poly Network Team
I WOULD SAY ITS A BIT RISKY TO RELAUNCH THE ORIGINAL MAINNET IN THIS WEEK. AFTER THIS INCIDENT, THE POLY IS EXPOSED TO MANY GREEDY HACKERS. YOU MAY PROVIDE A DECENT BOUNTY TO OTHER SECURITY EXPERTS SO THAT THEY WILL STAND ON YOUR SIDE. IN THE MEANWHILE, OFFERING A NEW TOKEN FOR COMPENSATION SEEMS TO BE THE STANDARD PROCEDURE IN THE DEFI WORLD. I THINK PEOPLE WILL UNDERSTAND THE SITUATION.
We appreciate your returning of assets and the explanation of your motivation. We would like to work with you to resolve the current and future security issues of PolyNetwork. Please complete the returning of assets as you promised and let's move on.
You are moving things to the right direction. We received 1+M USDC on Polygon. Did you ask us to encrypt the receiving addresses with your BookKeeper public key?
Hope you will transfer assets to addresses below:
ETH: 0x71Fb9dB587F6d47Ac8192Cd76110E05B8fd2142f
BSC: 0xEEBb0c4a5017bEd8079B88F35528eF2c722b31fc
Polygon: 0xA4b291Ed1220310d3120f515B5B7AccaecD66F17
The decision made by DAO can't changed the fact that the assets are stolen from crypto believers.We want to offer a security bounty and we hope it will be remembered as the biggest white hat hack in the history.