Poloniex wallets drained of as much as $100 million in crypto assets

The exchange’s major shareholder Justin Sun confirmed the “hack incident”

article-image

Sharaf Maksumov/Shutterstock, modified by Blockworks

share

Cryptocurrency exchange Poloniex suffered unauthorized withdrawals beginning at around 5:30 am ET Friday.

The withdrawals from Poloniex include millions of dollars worth of ether (ETH), tron (TRX) stablecoins (USDT/USDC) and chainlink (LINK), plus more than 250 other tokens with aggregate values between $1,000 to $800,000 at the time of the theft.

A total of $23 million remains in the attacker’s primary wallet, but much of the haul has been transferred elsewhere, including $11 million in USDT, exchanged for ether.

Security firm PeckShield first reported the suspicious transactions. Justin Sun, a major investor in Poloniex confirmed the incident on X:

“Poloniex maintains a healthy financial position and will fully reimburse the affected funds. Additionally, we are exploring opportunities for collaboration with other exchanges to facilitate the recovery of these funds,” Sun said.

Earlier, the exchange’s X account wrote, “our wallet has been disabled for maintenance,” but it subsequently reposted Sun’s account.

On-chain data analytics platforms Nansen and Arkham Intelligence observed substantial net outflows from the exchange:

Loading Tweet..

Arkham, tracking the flow of funds, puts the loss at closer to $100 million, monitoring $31.8 million in ETH, $28.3 million in TRX and $13.8 million in BTC.

The attack appears to have been initiated by a withdrawal of 4,900 ETH (about $10 million) from the exchange, followed by a flurry of withdrawals continuing until 6:40 am ET.

Poloniex subsequently offered the “Poloniex hacker” a 5% “white hat bounty” if the funds are returned within 7 days.

Earlier this year, the exchange settled with the US Treasury’s Office of Foreign Assets Control for $7.6 million over sanctions violations.

Justin Sun has controlling stakes in both Poloniex and Huobi crypto exchanges and founded the Tron network.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Hilton Park Lane

Tues - Wed, November 10 - 11, 2026

DAS London is a two-day summit at the Hilton Park Lane in London featuring conversations between the builders, allocators, and policy makers who are shaping the trajectory of the digital asset ecosystem in the UK, Europe, and North America.

Marina Bay Sands Singapore

Wednesday, October 07, 2026

DAS Asia is a a single-day summit at Marina Bay Sands Singapore featuring conversations between the builders, investors, and global leaders are shaping the trajectory of the digital asset ecosystem in Asia & North America.

recent research

Hyperliquid Purple (4).jpg

Research

HIP-3 has successfully scaled market creation on Hyperliquid, but it has not yet created a sustainable competitive deployer layer. Growth mode, USDH depreciation, high auction costs, and the 500K HYPE stake have made the model increasingly difficult for non-TradeXYZ deployers, leaving market creation concentrated around one clear outlier. We look at why deployer participation has slowed, what that means for HIP-3’s long-term design, and how tiered exchanges or temporary auction-fee relief could make smaller and more niche markets economically viable.

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

NewsPodcastsNewslettersEventsRoundtablesAnalytics