Bitcasino World Cup Raffle Campaign - Win the VIP World Football Championship Experience

Harmony’s Horizon Bridge Suffers a 100M Exploit in Latest DeFi Attack

The Horizon bridge to the Harmony blockchain has lost $100 million worth of altcoins to a malicious actor. Harmony announced today morning via Twitter.

Following a brief investigation, the Harmony team pinpointed the attacker’s Ethereum address. After compromising the Horizon bridge, the attacker transferred different tokens to their wallet, with the first transfer coming a little over 20 hours ago.

According to Harmony, this exploit did not impact the trustless Bitcoin (BTC) bridge. The protocol claims this bridge’s funds are stored in decentralized vaults.

Hacker is Yet to Move the Funds

The hacker stole various tokens, including Tether (USDT), USD Coin (USDC), Binance USD (BUSD), Aave (AAVE), wrapped Ethereum (wETH), and wrapped Bitcoin (wBTC), among others. Soon afterward, the attacker started swapping the tokens for Ethereum (ETH) and transferred the coins to the original address.

According to data from Etherscan, the address currently holds 85,867.25 ETH worth $99,135,461.20. Additionally, the address contains 990 AAVE worth at the time of writing. Thus far, the attacker is yet to move funds to any exchanges or privacy swap services.

The Harmony team added:

We have also notified exchanges and stopped the Horizon bridge to prevent further transactions. The team is all hands on deck as investigations continue. We will keep everyone up-to-date as we investigate this further and obtain more information.

A Case of Poor Security Practices?

This attack comes after Ape Dev, the founder of MEV Monke, voiced concerns over the security of the Harmony protocol.

Ape Dev said:

So all in all, if two of the four multisig signers are compromised, we’re going to see another 9 figure hack. Considering all that’s been going on lately, it’d be interesting to hear some details from @harmonyprotocol on how these EOAs are secured.

The exploit on Harmony’s Horizon bridge comes after attacks on Meter’s token bridge, Axie Infinity’s Ronin bridge, and Wormhole bridge.

Bitcoin live price
price change

Following the hack, Harmony’s native token, ONE, plunged more than 10% and is currently trading at $0.024.

Stay up to date with our latest articles