Harmony’s Cross-Chain Horizon Bridge Hacked for $100M

Harmony’s team said it has notified exchanges in an attempt to prevent further malicious transactions and is expected to update users soon

article-image

Zeeland Bridge, Netherlands. Credit: Unsplash

share

key takeaways

  • Horizon has been hacked for $100 million while stewards of the bridge said they are working with authorities to identify the attacker
  • Funds and assets from the Bitcoin bridge remain unaffected as they are stored in decentralized vaults, Harmony’s team said

Horizon Bridge, a cross-chain interoperability platform between Ethereum, Binance Smart Chain (BSC) and Harmony blockchain networks, has been hacked for $100 million.

The Harmony team, stewards of the bridge, said Thursday it has been made aware of the theft and has begun working with national authorities as well as forensic specialists to identify the attacker in an attempt to retrieve the stolen funds.

“We discovered the hack this morning and immediately began reaching out to our cyber security partners, exchanges, and the FBI, and we’re actively working with all three,” Harmony told Blockworks via Telegram.

“Once contact was established, our next goal was to communicate the situation with our community via Twitter and we’ve since published a Medium article which will receive ongoing updates as information is gathered,” the team added.

Harmony representatives said the hack did not impact the trustless Bitcoin bridge, as funds and assets are stored on decentralized vaults and are considered “safe at this time.” Horizon Bridge is audited by blockchain security firm Peckshield.

It’s the latest in a string of hacks against protocols, bridges and projects, including a $20 million theft from Ethereum scaling solution Optimism earlier this month and a $320 million hack against Solana bridge Wormhole in February. Ethereum-linked sidechain Ronin Network — used for blockchain game Axie Infinity — also suffered a hack in April with a whopping $620 million stolen.

Horizon enables cross-chain transfers of digital assets between Ethereum and Harmony, as well as BSC, via a set of smart contracts deployed across those three chains. Users holding assets including stablecoins, ERC-20 tokens or Binance’s BEP-20 tokens can exchange them for corresponding assets on Harmony for a 1:1 ratio.

In a later tweet update on Thursday, Harmony’s team said it had identified the hacker’s wallet address. The address has a balance of roughly 85,837 ether or around $98 million at time of writing.

“We have also notified exchanges and stopped the Horizon bridge to prevent further transactions. The team is all hands on deck as investigations continue,” the team said.

Harmony told Blockworks its founder, Stephen Tse, will discuss the hack and the team’s ongoing efforts via YouTube on Friday, as well as an update on their attempt to identify the culprit and retrieve the stolen funds.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Research Report Templates.png

Research

ZKPs enable efficient offchain transaction processing and validation, resulting in increased throughput and reduced fees. Solana's ZK Compression leverages ZKPs to minimize onchain storage costs, while Sui's zkLogin streamlines user onboarding by replacing complex key management with familiar OAuth credentials.

article-image

The crypto asset manager lowered its planned fee from 0.25% to 0.15%, undercutting its competitors

article-image

Plus, a look at planned ETH ETF fees and how they differ from their BTC counterparts

article-image

North Korea suspected in breach of Indian exchange’s multisig wallet

article-image

Plus, Sanctum’s CLOUD token has officially launched — but not without problems

article-image

It’s not yet clear whether Donald Trump is pumping bitcoin. But an unofficial memecoin is still seeing benefit.