Crypto Theft: North Korean Hackers Stole $100 Million From Harmony Blockchain Bridge

The hackers stole various digital tokens like Ethereum, Binance Coin, Tether, USD Coin, and Dai.

Horizon Bridge hacker has so far sent 41 percent of the $100 million in stolen crypto assets into the 'Tornado Cash' mixer.

Source : Sora Shimazaki/Pexels

San Francisco: Cyber-security researchers have linked North Korea-backed notorious Lazarus Group with stealing $100 million worth digital tokens from Harmony, the crypto startup behind Horizon Blockchain Bridge.

The Lazarus Group has perpetrated several large cryptocurrency thefts totalling over $2 billion, and has recently turned its attention to Decentralised Finance (DeFi) services such as cross-chain bridges, according to London-based blockchain analysis provider Elliptic.

The same group is believed to be behind the $540 million hack of Ronin Bridge.

"The theft was perpetrated by compromising the cryptographic keys of a multi-signature wallet -- likely through a social engineering attack on Harmony team members. Such techniques have frequently been used by the Lazarus Group," the researchers wrote in a blog post.

Harmony admitted that a malicious attack happened on its proprietary Horizon Ethereum Bridge and multiple transactions occurred that compromised the bridge with 11 transactions that extracted tokens stored in the bridge.

"The estimated value at the time of the attack was approximately $100 million," the US-based company said in a statement late last month.

The hackers stole various digital tokens like Ethereum, Binance Coin, Tether, USD Coin, and Dai.

The Horizon Bridge hacker has so far sent 41 percent of the $100 million in stolen crypto assets into the 'Tornado Cash' mixer, said the researchers.

Mixers such as Tornado Cash are used to hide the transaction trail.

"By sending these funds through Tornado, the thief is attempting to break the transaction trail back to the original theft. This makes it easier to cash out the funds at an exchange," said Elliptic.

In April this year, hackers stole nearly $180 million in cryptocurrency from Beanstalk Farms, a decentralised finance (De-Fi) project.

The FBI in April blamed North Korean hacker group Lazarus for stealing $625 million in cryptocurrency from the Ronin Network, owned by developer group Sky Mavis.

In January this year, hackers stole crypto tokens worth $120 million from Blockchain-based decentralised finance (DeFi) platform BadgerDAO.

(This report has been published as part of the auto-generated syndicate wire feed. Apart from the headline, no editing has been done in the copy by ABP Live.)

Disclaimer: Crypto products and NFTs are unregulated and can be highly risky. There may be no regulatory recourse for any loss from such transactions. Cryptocurrency is not a legal tender and is subject to market risks. Readers are advised to seek expert advice and read offer document(s) along with related important literature on the subject carefully before making any kind of investment whatsoever. Cryptocurrency market predictions are speculative and any investment made shall be at the sole cost and risk of the readers.