Harmony Hacker Begins Laundering Funds


The $1 million bounty was not enough to convince the hacker to return the funds.

The Harmony attacker is sending 100 ETH to the Tornado Cash router every six minutes and has already mixed more than $12 million through the protocol.

100 ETH Every Six Minutes

The Harmony attacker is starting to send their tokens through Tornado Cash.

As shown by Etherscan, the wallet responsible for last week’s Harmony exploit sent a little more than 18,036 ETH (a sum worth north of $21 million at today’s prices) to a secondary wallet. That secondary wallet then evenly split the sum between three tertiary wallets; at the time of writing, two of these tertiaries have sent ETH to a Tornado Cash router.

Stay in the know on crypto by frequently visiting Crypto News Today

Harmony’s Horizon bridge was exploited last week for more than $100 million in various tokens including FRAX, FXS, wETH, wBTC, AAVE, SUSHI, USDT, and BUSD; these were all swapped on Uniswap for ETH. 

That sum is now being routed through Tornado Cash in installments of 100 ETH. At the time of writing 10,409 ETH (more than $12 million) had already been mixed in the privacy-enabling protocol. New 100 ETH transactions are happening approximately every six minutes.


Tornado Cash is an Ethereum protocol that leverages zero-knowledge technology to allow users to break the links in their on-chain activity. If used correctly, the protocol makes it impossible to track down transactions from one wallet to another.

The protocol has been used by hackers in the past to cash in on their ill-acquired gains. Data from Nansen indicates that the Harmony exploiter, while having only sent about 12% of their loot to Tornado Cash, is already the fifth-biggest malicious user of the protocol (behind the Ronin, Fei, Beanstalk, and Parity exploiters). 

Two days ago Harmony had offered the Horizon bridge hacker a $1 million bounty for returning the stolen funds, with the promise of not advocating for criminal charges if they chose to cooperate. Other protocols have paid out even greater bounties in the past, with Aurora recently rewarding a white-hat hacker $6 million for detecting a possible exploit and notifying the team about it.

© 2022-2023 Crypto Caster provides information. does not provide investment advice. Do your research before taking a market position on the purchase of cryptocurrency and other asset classes. Past performance of any asset is not indicative of future results. All rights reserved.

Support CryptoCaster with any amount of Bitcoin by copying and pasting our Unstoppable Domain; villagewest.crypto in your sending wallet or crypto coin exchange.

Your contribution support will help in our growth, coverage, and global presence. CryptoCaster is a decentralized publisher “Covering a Global Evolution Re-defining Mediums Of Exchange”. We will continue to upgrade and create impactful sections to our lineup.
Any amount, as often as you can contribute will be greatly appreciated.
Every contribution, however big or small, is so valuable for our future. Thank you for your consideration and support!
Member of Global Meta Media Consortium℠

Leave a Comment

Your email address will not be published.

You may also like