Multisig keys on Harmony's Horizon bridge were compromised, draining roughly $100M in assets. The FBI confirmed North Korea's Lazarus Group (APT38), and the funds were laundered through Tornado Cash / RAILGUN.
No verified attacker addresses are listed for this incident. We only publish addresses confirmed against an authoritative source.
Figures are approximate, compiled from public reporting. Attacker addresses are included only where verified against an authoritative source. Attribution (e.g. Lazarus Group) is shown only when publicly stated by an official body.
© 2026 ChainAnalyzer. All rights reserved.