Loading ForensicBlock
Preparing your blockchain forensics platform...
Preparing your blockchain forensics platform...
Poly Network Exploiter 1 · ~$610M at the time of the incident · attributed 2021-08-10
Runs on the same methodology-versioned engine a client matter uses, and can be sealed into a court-ready exhibit whose SHA-256 hash anyone can verify in a browser.
Address identified as the Ethereum-side exploiter wallet of the Poly Network cross-chain exploit, corroborated by the Etherscan on-chain label ("PolyNetwork Exploiter 1", verified verbatim), Chainalysis's analysis, and Poly Network's own public statement naming the address. CRITICAL CONTEXT: the exploiter ("Mr. White Hat") RETURNED ALL of the funds to Poly Network within ~15 days; no individual was charged or convicted. This is a returned-funds exploit — material context, not a present-tense theft. (Poly used separate attacker addresses on BSC and Polygon; only the Ethereum address is listed here.)
Attribution confidence recorded at 88/100 (source strength, never a bare 100). Last verified 2026-07-16.
ForensicBlock asserts no new attribution. Every fact on this page is public record, cited to a primary source you can open, restated so you can verify it independently. This restates the public record and does not by itself establish legal culpability — an indictment is an allegation, not a conviction, and the on-chain address below is attributed by the cited sources, not by us.