Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Harmony Private Key Leak: $100.00M Reported Loss

·Historical incident record

Incident Overview

Harmony Horizon bridge was hacked. According to the analysis of SlowMist MistTrack, the attackers made more than 100 million US dollars, including 11 ERC20 tokens, 13,100 ETH, 5,000 BNB and 640,000 BUSD. On the 26th, Harmony founder Stephen Tse said on Twitter that Horizon was attacked not because of a smart contract vulnerability, but because of a private key leak. Although Harmony stored the private keys encrypted, the attacker decrypted some of them and signed some unauthorized transactions. At present, Harmony has migrated Horizon's verification authority on the Ethereum side to 4/5 multi-signature. It is reported that this incident is suspected to be related to the North Korean hacker group Lazarus Group.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    XCarnival

    Attack methodContract Vulnerability
    Reported loss1,620 ETH
  2. Incident date
    Target

    SNOOD

    Attack methodReentrancy Attack
    Reported loss104 ETH
  3. Incident date
    Target

    Quixotic

    Attack methodContract Vulnerability
    Reported loss220,000 OP
  4. Incident date
    Attack methodDNS Attack
    Reported loss215 ETH
  5. Incident date
    Attack methodDNS Attack
    Reported loss16.5 BTC