The threat actor behind the attack on the Poly network cross-chain protocol has decided to return the funds they stole. The original attack left the threat actor with $611 million worth of cryptocurrency assets, $273 million worth of Ethereum tokens, $253 million in tokens on Binance Smart Chain, and $85 million in USDC on the Polygon network. The company asked the threat actor to return the funds to avoid law enforcement action, and at the time of writing, the threat actor returned $260 million worth of stolen cryptocurrency. The attacker has yet to return $269 million on Ethereum and $84 million on Polygon. According to the threat actor, they chose this attack because they saw it as one of the most challenging attacks they could have conducted. The threat actor embedded a Q&A in their attack and stated they did not trust anyone at Poly Network to fix the bug without exploiting it themselves, so they wanted to keep the money in a secure account while the bug was fixed.