The funds from Harmony’s Horizon Bridge have started to transfer to the Tornado Cash Ethererum mixer, signaling the attacker doesn’t have aim of accepting the $a million bounty offered.
The choice to obfuscate the ill-become gains solutions questions regarding if the Harmony team’s offer of just 1% from the $100 million in crypto funds stolen on Friday could be enough to convince the exploiter to come back them.
#PeckShieldAlert ~6k $ETH (~$7.1m) into @TornadoCash from @harmonyprotocol exploiters
Intermediary address: 0x432…47ae pic.twitter.com/AR9dmJRQet— PeckShieldAlert (@PeckShieldAlert) June 27, 2022
As many as 18,036.3 Ether (ETH), worth about $21 million, was moved from the Horizon Bridge exploiter’s primary wallet at 03:10 am EST on Tuesday. These funds were then divided equally 3 ways and delivered to three different addresses in single transactions, correspondingly, within the next 10 hrs.
Tornado Cash supports mixing no more than 100 ETH at any given time, meaning a large amount can certainly take several hrs to combine. Mixing ETH is really a privacy measure made to obfuscate the transaction road to coins so that they can’t be tracked to previous transactions.
The foremost and second wallets that received ETH in the exploiter’s primary wallet have finished mixing the coins and therefore are now playing about 16.3 ETH with each other, a sum likely they canrrrt make use of.
The third wallet was busy delivering batches of 100 ETH to Tornado in eight-minute times but still had 2,800 coins remaining as of times of writing.
Cointelegraph hasn’t received an answer in the Harmony team on which it intends to do in order to switch the stolen funds within the bridge.
The project’s Twitter account reaffirmed on Monday the team was dealing with “two highly trustworthy blockchain tracing and analysis partners,” combined with the U . s . Condition Fbi, to research the hack.
1/ We’re aware the hacker has started to maneuver funds through Tornado Cash. They is dealing with two highly trustworthy blockchain tracing and analysis partners, and collaborating using the FBI included in an analysis into this criminal act.
— Harmony (@harmonyprotocol) June 28, 2022
About $80 million in ETH continues to be within the explorer’s primary wallet. They might possibly return part of the stolen funds to Horizon, or they might be going for a break because it has had the exploiter over 13 hrs to combine just $21 million.
Even though the initial haul was worth about $100 million at that time, positive ETH cost fluctuations have elevated the dollar value to $101.5 million.
Stephen Tse, founding father of Harmony, confirmed on Saturday the exploiter required charge of the needed two Horizon Bridge signees for that multisignature address accustomed to secure funds. He noted the Ethereum side from the bridge impacted by the exploit was moved to some more secure multisig wallet that needed four signees.
Related: Axie Infinity to pay Ronin exploit victims and relaunch bridge
Horizon may be the latest inside a growing listing of token bridges which have been attacked. The biggest token bridge to become hacked was Poly Network in 2021, which lost $610 million which was almost entirely came back.
As a whole, over $1 billion continues to be obtained from the Meter, Wormhole, Ronin and now Horizon token bridges through dubious means in 2022 to date.
