Harmony Bridge

2020-10-01

Harmony Horizon Bridge launched, enabling cross-chain transfers between Harmony, Ethereum, and Binance Smart Chain

2022-06-23

Harmony Protocol team notified of a malicious attack on the Horizon Ethereum Bridge

2022-06-24

Approximately $99.6 million stolen from the Horizon Bridge across 11-14 transactions via compromised 2-of-5 multisig keys; attacker address 0x0d043128146654c7683fbf30ac98d7b2285ded00 identified

2022-06-24

Harmony offered a $1 million bounty for return of stolen funds; no response received

2022-06-27

Attackers begin 857-transaction series of Tornado Cash deposits totaling 85,700 ETH, continuing through July 2, 2022

2022-07-27

Harmony proposes two reimbursement options: minting 4.97 billion or 2.48 billion ONE tokens to compensate hack victims

2022-08-08

OFAC sanctions Tornado Cash, citing its use by the Lazarus Group to launder funds from Harmony and other hacks

2022-09-23

Harmony reverses token-minting reimbursement plan following community backlash; commits to treasury-funded recovery with 0% new minting

2022-10-01

Harmony relaunches cross-chain bridge using LayerZero validation layer, replacing the compromised multisig infrastructure

2023-01-13

North Korean-attributed actors resume laundering, depositing approximately $60 million in ETH into Railgun privacy protocol; 99.9% of Railgun deposits during this window traced to Harmony hack proceeds

2023-01-14

Binance and Huobi identify, block, and freeze approximately 124 BTC (~$2.5 million) deposited from the laundering addresses

2023-01-23

FBI formally confirms Lazarus Group (APT38) was responsible for the June 2022 Harmony Horizon Bridge theft; publishes 11 associated Bitcoin wallet addresses

2025-03-01

U.S. Treasury removes Tornado Cash from OFAC SDN list following Fifth Circuit Court of Appeals decision overturning sanctions