Poly Network Mainnet Upgrade Goes Live
Since the attack on Poly Network, the team has been in continuous communication with Mr. White Hat and actively synchronizing the latest progress with them. We hope Mr. White Hat can transfer the private keys and help Poly Network return the asset control to users as soon as possible.
In order to ensure that subsequent asset recovery can be carried out smoothly, we previously announced our system recovery roadmap. We have completed the first phase of “vulnerability fixing”, and are working with multiple security agencies including PeckShield, BlockSec, and Chengdu Chain Security (tbd) on auditing the vulnerable code.
This is the Github PR for the vulnerability fix https://github.com/polynetwork/eth-contracts/pull/12/files
PeckShield: https://peckshield.medium.com/polynetwork-bug-review-and-patch-analysis-88bde8441297
BlockSecTeam Review: https://blocksecteam.medium.com/the-informal-security-review-of-the-patch-of-the-poly-network-1a0a532b731e
Beosin (Chengdu LianAn Tech) Review: https://beosin.medium.com/boesins-analysis-of-the-fix-code-on-poly-network-smart-contracts-a305639ea626
In addition to the $500,000 Bug Bounty promised to Mr. White Hat, we will release an additional Bounty program worth $500,000 on the Immunefi platform to encourage global security agencies and White Hat organizations to participate in ensuring core functional security on Poly Network.
Poly Network mainnet upgrade went live
On August 16, the Poly Network mainnet upgrade went live, and as stated in our roadmap, the Poly Network team has completed Phase 2 objectives and is set to begin with Phase 3, “Project Launch”. The cross-chain functionality of Poly Bridge assets has been restored. For security reasons, Poly Bridge has taken down all assets and plans on deploying them individually after projects carry out testing and apply for deployment again, after which users will be able to freely execute cross-chain transactions with their assets.
Application Channel
The first set of projects for whom cross-chain channels will be resumed fall in the following two categories.
a. Newly launched projects, i.e., projects that have completed testing on the Poly testnet and have not been affected by this incident.
b. Uninfluenced projects, i.e., for the projects that are already using Poly Network services and have not received any impact on their assets.
The link to the application form is https://forms.gle/sLENx34jPBUsrYjx7. Projects are invited to send in an application to the Poly Network team through this channel.
We continue to maintain the safe recovery of assets as the first priority and hope our efforts on security will be recognized by Mr. White Hat and strengthen users’ trust. Stay tuned.
For more info about Poly Network
Website | Telegram | Medium | Twitter | Discord | Github| Forum
