Share this article

Harmony Hackers Cover Tracks by Bridging Portion of $100M Loot to Avalanche, Ethereum and Tron

The hackers are using privacy wallets and cross-chain bridges to obfuscate stolen funds.

Harmony hackers have "bridged" funds to Avalanche, Ethereum and Tron, according to on-chain analysis. (John Noonan/Unsplash)
Harmony hackers have "bridged" funds to Avalanche, Ethereum and Tron, according to on-chain analysis. (John Noonan/Unsplash)

The hackers who targeted the Harmony network in a $100 million attack last year have bridged their ill-gotten gains from the Bitcoin blockchain to the Avalanche, Tron and Ethereum platforms, according to on-chain analysis by blockchain sleuth MistTrack.

Lazarus Group, a North Korean hacking group that was behind the $635 million Ronin Bridge hack, is suspected to be behind the attack and subsequent transfers.

jwp-player-placeholder
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Last week, the hackers sent $63.5 million (41,000 ETH) to Railgun, a privacy-focused crypto wallet, before moving the funds on to various exchanges. The bitcoin (BTC) was then withdrawn from exchanges, with a portion of it being bridged to the Avalanche network.

In an attempt to further obfuscate the stolen funds, the hackers converted the bridged bitcoin for stablecoins tether (USDT) and USDD, which were subsequently sent to a multi-chain USDT address on both the Ethereum and Tron networks.

Hackers are being forced to go to extraordinary lengths to convert stolen crypto to fiat currency after the U.S. sanctioned popular coin mixing service Tornado Cash.

Blockchain security firm Chainalysis revealed that over $3 billion in crypto was lost across 125 hacks in 2022.

Oliver Knight

Oliver Knight is the co-leader of CoinDesk data tokens and data team. Before joining CoinDesk in 2022 Oliver spent three years as the chief reporter at Coin Rivet. He first started investing in bitcoin in 2013 and spent a period of his career working at a market making firm in the UK. He does not currently have any crypto holdings.

Oliver Knight