Cross-chain manager keeper hijacked; whitehat returned all.
Attacker wallets funded and staged ahead of the bridge exploit exploit against Poly Network.
$611.0M drained from Poly Network on Ethereum via Bridge Exploit.
CertiK flagged the anomalous transactions and published an initial alert.
Poly Network paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$611.0M returned to users — negotiation, freezes, or a whitehat return closed the incident.