Elliptic: Lazarus hacker group may be behind Harmony One hack

Article Reading Time:
1 min.

Cybersecurity agency Elliptic, while investigating the exploit and methods of laundering money stolen during the hack of the Harmony One bridge, discovered a “North Korean trace” of Lazarus.

Elliptic suggested that the bridge was hackedThe $100 million Harmony One may be responsible for the North Korean government-backed hacker group Lazarus. The company claims that the methods used to launder stolen cryptocurrency are similar to those previously used by Lazarus.

According to experts, to hack the systemsecurity protocol, hackers first targeted the username and password of Harmony One employees in the Asia-Pacific region. Once in control, the criminals used automated services to move stolen assets - the hackers transferred more than 40% of the funds to the Tornado Cash mixer.

Let us recall that last week the Harmony One project team reported that the Horizon bridge between the Ethereum, Binance Chain and Bitcoin blockchains had been hacked. Hackers managed to steal tokens worth $100 million. 

A few days later the agencyCybersecurity PeckShield reported that the stolen assets were in motion. The hackers sent three transactions from the address used in the hack, totaling about $36 million. The addressee was the Tornado Cash mixing service.

</p>

At the same time, assets worth $64 million are still in the hackers’ wallet. It was probably from these manipulations that Elliptic concluded that Lazarus hackers were behind the hack.