Poloniex wallets drained of as much as $100 million in crypto assets

The exchange’s major shareholder Justin Sun confirmed the “hack incident”

article-image

Sharaf Maksumov/Shutterstock, modified by Blockworks

share

Cryptocurrency exchange Poloniex suffered unauthorized withdrawals beginning at around 5:30 am ET Friday.

The withdrawals from Poloniex include millions of dollars worth of ether (ETH), tron (TRX) stablecoins (USDT/USDC) and chainlink (LINK), plus more than 250 other tokens with aggregate values between $1,000 to $800,000 at the time of the theft.

A total of $23 million remains in the attacker’s primary wallet, but much of the haul has been transferred elsewhere, including $11 million in USDT, exchanged for ether.

Security firm PeckShield first reported the suspicious transactions. Justin Sun, a major investor in Poloniex confirmed the incident on X:

“Poloniex maintains a healthy financial position and will fully reimburse the affected funds. Additionally, we are exploring opportunities for collaboration with other exchanges to facilitate the recovery of these funds,” Sun said.

Earlier, the exchange’s X account wrote, “our wallet has been disabled for maintenance,” but it subsequently reposted Sun’s account.

On-chain data analytics platforms Nansen and Arkham Intelligence observed substantial net outflows from the exchange:

Loading Tweet..

Arkham, tracking the flow of funds, puts the loss at closer to $100 million, monitoring $31.8 million in ETH, $28.3 million in TRX and $13.8 million in BTC.

The attack appears to have been initiated by a withdrawal of 4,900 ETH (about $10 million) from the exchange, followed by a flurry of withdrawals continuing until 6:40 am ET.

Poloniex subsequently offered the “Poloniex hacker” a 5% “white hat bounty” if the funds are returned within 7 days.

Earlier this year, the exchange settled with the US Treasury’s Office of Foreign Assets Control for $7.6 million over sanctions violations.

Justin Sun has controlling stakes in both Poloniex and Huobi crypto exchanges and founded the Tron network.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Upcoming Events

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates.png

Research

Despite ending its points program, Hyperliquid has maintained a dominant market position with 77% of perpetuals DEX volumes, though overall volume has decreased from early 2025. It is the only DEX that has been able to compete with CEX volumes. Hyperliquid's success stems primarily from rapid, relevant token listings and superior UX for users and market makers, particularly its API - which is how market makers interact with the protocol. The controversial oracle price override during the JELLY incident exposed risks in the Hyperliquid Liquidity Pool (HLP), though the team has since implemented risk management adjustments. The HyperEVM is currently underoptimized and lacks necessary precompiles, but represents an important strategic expansion to enable asset issuance and DeFi composability.

article-image

Securitize announced it acquired a crypto-focused fund administration firm

article-image

ETH’s success hinges on the resource of data availability, particularly how much it sells to L2s

article-image

Solayer’s Emerald Card integrates SolanaID so users can build their “onchain reputation.”

article-image

In 2011, bitcoin blew past the one-dollar event horizon and never looked back

article-image

Sponsored

Transferability of WCT brings the onchain economy closer to a more open, permissionless, and community-driven experience

article-image

Taking a look at the biggest stablecoin players and where they stand