Harmony Bridge
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·3paRYJ…Uf9wSummary
Harmony's Horizon Bridge is a cross-chain bridge connecting the Harmony (ONE) blockchain to Ethereum and Binance Smart Chain, launched in October 2020. In June 2022, it was exploited for approximately $100 million by the Lazarus Group, a North Korea-affiliated state-sponsored hacking collective, through compromise of a 2-of-5 multisig scheme controlling bridge funds. The FBI formally confirmed Lazarus Group attribution in January 2023; as of 2025, full victim restitution has not been achieved.
Connected Entities
1 entities- + 2 more
Timeline(13 events)
October 2020
Harmony Horizon Bridge launched, enabling cross-chain transfers between Harmony, Ethereum, and Binance Smart Chain
23 June 2022
Harmony Protocol team notified of a malicious attack on the Horizon Ethereum Bridge
24 June 2022
Approximately $99.6 million stolen from the Horizon Bridge across 11-14 transactions via compromised 2-of-5 multisig keys; attacker address 0x0d043128146654c7683fbf30ac98d7b2285ded00 identified
24 June 2022
Harmony offered a $1 million bounty for return of stolen funds; no response received
27 June 2022
Attackers begin 857-transaction series of Tornado Cash deposits totaling 85,700 ETH, continuing through July 2, 2022
27 July 2022
Harmony proposes two reimbursement options: minting 4.97 billion or 2.48 billion ONE tokens to compensate hack victims
8 August 2022
OFAC sanctions Tornado Cash, citing its use by the Lazarus Group to launder funds from Harmony and other hacks
23 September 2022
Harmony reverses token-minting reimbursement plan following community backlash; commits to treasury-funded recovery with 0% new minting
October 2022
Harmony relaunches cross-chain bridge using LayerZero validation layer, replacing the compromised multisig infrastructure
13 January 2023
North Korean-attributed actors resume laundering, depositing approximately $60 million in ETH into Railgun privacy protocol; 99.9% of Railgun deposits during this window traced to Harmony hack proceeds
14 January 2023
Binance and Huobi identify, block, and freeze approximately 124 BTC (~$2.5 million) deposited from the laundering addresses
23 January 2023
FBI formally confirms Lazarus Group (APT38) was responsible for the June 2022 Harmony Horizon Bridge theft; publishes 11 associated Bitcoin wallet addresses
March 2025
U.S. Treasury removes Tornado Cash from OFAC SDN list following Fifth Circuit Court of Appeals decision overturning sanctions
Decision Log
- hash: GBd8GQLVZxVSJAgkQ1nxAYRJByKa6q1k5yTE7pVomBsM
This investigation is cryptographically anchored to the Solana blockchain (1 event). 16 of 20 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:49 AM
last updated: 8/30/2026, 5:14:13 AM
avoid.net — verified advice for a post-truth world