Share this article

Harmony Attacker Moves Over $44M Worth of Stolen Ether; Authorities Alerted

Harmony is working with two blockchain tracing and analysis firms and collaborating with the FBI, developers said.

Updated May 11, 2023, 4:41 p.m. Published Jun 28, 2022, 9:30 a.m.
(Boris Zhitkov/Getty Images)
(Boris Zhitkov/Getty Images)

The attacker behind last week’s $100 million exploit on the Harmony network started moving funds worth millions of dollars in cryptocurrencies Monday night, blockchain data shows.

Harmony is aware of the movement and is collaborating with blockchain analysis firms and the U.S. Federal Bureau of Investigation (FBI) to catch the culprit, developers said in a tweet on Tuesday morning. The exploited "Horizon" bridge allowed users to exchange assets, such as tokens, stablecoins and non-fungible tokens (NFT), among the Ethereum, Binance Smart Chain (BSC) and Harmony blockchains.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Blockchain data shows the exploiter wallet marked “Horizon Bridge Exploiter” moved over 36,000 ether , worth over $44 million, in the past 26 hours.

On Monday, the exploiter moved over 18,000 ether , worth over $22 million at the time of writing, to three wallets. The coins were then sent to Tornado Cash, with the three wallets holding only a few ether as of writing time.

Over 36,000 ether have been moved in the past 24 hours. (Etherscan)

In Asian hours on Tuesday, the exploiter moved another 18,000 ether to yet another wallet. From that, some 6,000 ether was then moved to a separate “0x89f89d61644c6e606efb25a01210159f102fbd8b” wallet.

The funds were then sent to privacy swap service Tornado Cash in batches of 100 ether each, blockchain data shows. Over 1,200 ether, worth just over $1.4 million, passed through Tornado Cash at press time.

Various wallets received over 6,000 ether in the past 24 hours each. (Etherscan)
Various wallets received over 6,000 ether in the past 24 hours each. (Etherscan)

Tornado Cash breaks the on-chain link between a source and a destination address. This allows exploiters and hackers to mask their addresses while withdrawing illicitly gained funds.

The main exploiter wallet continues to hold over 49,000 ether, or over $59 million, as of early European hours on Tuesday. Meanwhile, the price of Harmony's native ONE token slumped nearly 9% to 2 cents in the past 24 hours.

More For You

KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market

16:9 Image

KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.

What to know:

  • KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
  • This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
  • Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
  • Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
  • Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.

More For You

Solana’s new phase is ‘much more about finance,’ says Backpack CEO Armani Ferrante

Backpack CEO Armani Ferrante (CoinDesk)

The Solana ecosystem has spent the past year doubling down on a financial infrastructure, Backpack CEO Armani Ferrante told CoinDesk.

What to know:

  • Solana’s latest phase looks a lot less flashy than its memecoin-fueled highs, and that may be the goal.
  • Armani Ferrante, CEO of crypto exchange Backpack, told CoinDesk in an interview the Solana ecosystem has spent the past year doubling down on a more sober focus: financial infrastructure. A
  • fter years of experimentation as the wider crypto industry focused on NFTs, games and social tokens, attention is now shifting back toward decentralized finance, trading and payments.