Around $114M in crypto assets was drained from the Poloneix exchange in a hack on the Ethereum and TRON networks on November 10, 10:46 AM (UTC).

1. The top 5 assets include:

• 32.7M USDT, of which 21.7M was on the TRON network and 11M was on the Ethereum network
• 443 BTC ($16.5M) on the TRON network, of which 63 BTC are wrapped as WBTC
• 6,103 ETH ($12.7M) on the Ethereum network
• 6.76M USDC, of which 4.98M was on the Ethereum network and 1.78M was on the TRON network
• 577B SHIB ($4.74M) on the Ethereum network

2. The hacker has swapped various assets, including stablecoins, SHIB, LINK, STORJ, WTRX, and ELON for 14,825 ETH (now worth $30.7M) on the Ethereum chain.

Fig 1. Poloniex hacker sold assets to ETH.

3. Their total ETH holding is now estimated at at least 20,928 ETH ($43.4M), of which 19,632 ETH were spread across 24 identified addresses.

Fig 2. Poloniex hacker's current holdings on the Ethereum chain

4. The hacker also wrongly sent 10.5M GLM ($2.5M) to the token contract, essentially burning all the GLM tokens:

• transaction: 0xc9700e4f072878c4e4066d1c9cd160692468f2d1c4c47795d28635772abc18db

Fig 3. Poloniex hacker sent GLM to the wrong contract.

5. Justin Sun announced a 5% white hat bounty to the hacker to return the stolen fund within 7 days on his official X account:

6. The hacker appears to still hold all assets and has not used any mixers so far. There is a chance they may accept Justin Sun's deal.

7. Related addresses:

• collection of addresses on the Ethereum chain: visit the Poloniex Hacker entity here
• TRON address: TKK6d1YALy8HCSoCSWWd1ZJhyC9NPPx4wa