Skip to main content
AVOID.NET

Harmony Bridge

avoid.net/harmony-bridge10/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3paRYJ…Uf9w

Summary

Harmony's Horizon Bridge is a cross-chain bridge connecting the Harmony (ONE) blockchain to Ethereum and Binance Smart Chain, launched in October 2020. In June 2022, it was exploited for approximately $100 million by the Lazarus Group, a North Korea-affiliated state-sponsored hacking collective, through compromise of a 2-of-5 multisig scheme controlling bridge funds. The FBI formally confirmed Lazarus Group attribution in January 2023; as of 2025, full victim restitution has not been achieved.

Connected Entities

9 entities · 60 linked investigations
Organizations
Protocols
LayerZero — DVN Single-Verifier Configuration Risk
Tokens
Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)Bitcoin62
Relationships
  • Harmony Bridgementioned withBitcoin(75%)
  • Harmony Bridgementioned withRailgun(70%)
  • Harmony Bridgementioned withEthereum(80%)
  • Ronin Bridgementioned withEthereum(80%)
  • Harmony Bridgementioned withBinance(70%)
  • Ethereummentioned withBitcoin(60%)
  • Ronin Bridgementioned withBinance(65%)
  • Binancementioned withEthereum(65%)
  • Harmony Bridgementioned withLayerZero — DVN Single-Verifier Configuration Risk(70%)
  • Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)mentioned withEthereum(70%)
  • + 17 more
Have evidence about Harmony Bridge?

Timeline(13 events)

October 2020

Harmony Horizon Bridge launched, enabling cross-chain transfers between Harmony, Ethereum, and Binance Smart Chain

23 June 2022

Harmony Protocol team notified of a malicious attack on the Horizon Ethereum Bridge

24 June 2022

Approximately $99.6 million stolen from the Horizon Bridge across 11-14 transactions via compromised 2-of-5 multisig keys; attacker address 0x0d043128146654c7683fbf30ac98d7b2285ded00 identified

24 June 2022

Harmony offered a $1 million bounty for return of stolen funds; no response received

27 June 2022

Attackers begin 857-transaction series of Tornado Cash deposits totaling 85,700 ETH, continuing through July 2, 2022

27 July 2022

Harmony proposes two reimbursement options: minting 4.97 billion or 2.48 billion ONE tokens to compensate hack victims

8 August 2022

OFAC sanctions Tornado Cash, citing its use by the Lazarus Group to launder funds from Harmony and other hacks

23 September 2022

Harmony reverses token-minting reimbursement plan following community backlash; commits to treasury-funded recovery with 0% new minting

October 2022

Harmony relaunches cross-chain bridge using LayerZero validation layer, replacing the compromised multisig infrastructure

13 January 2023

North Korean-attributed actors resume laundering, depositing approximately $60 million in ETH into Railgun privacy protocol; 99.9% of Railgun deposits during this window traced to Harmony hack proceeds

14 January 2023

Binance and Huobi identify, block, and freeze approximately 124 BTC (~$2.5 million) deposited from the laundering addresses

23 January 2023

FBI formally confirms Lazarus Group (APT38) was responsible for the June 2022 Harmony Horizon Bridge theft; publishes 11 associated Bitcoin wallet addresses

March 2025

U.S. Treasury removes Tornado Cash from OFAC SDN list following Fifth Circuit Court of Appeals decision overturning sanctions

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 16 of 20 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:49 AM

last updated: 8/30/2026, 5:14:13 AM

6 views

avoid.net — verified advice for a post-truth world