根据 PeckShield报告， Harmony 攻击者已经通过该协议混合了超过 1200 万美元，他们每六分钟向 Tornado Cash 发送 100 ETH。
周四上午，权益证明区块链“Harmony”披露，价值 1 亿美元的加密货币已从其 Horizon 桥中被盗。
相关阅读 | 突破：FTX探索购买Robinhood的方式
和谐发布了鸣叫6 月 23 日声明：
Harmony 团队已确定今早发生在 Horizon 桥上的一起盗窃案，金额约为$100 毫米。
后来，他们在博客上讲述了这些事件。 Harmony 表示，他们的 Horizon Ethereum Bridge 是“恶意攻击”的受害者。
根据博文，攻击者能够访问和解密 BUSB、USDC、ETH 和 WBTC 形式的欺诈交易和没收资产中使用的一些密钥。然后攻击者将所有资产转换为 ETH。
Horizon 桥被用于窃取超过 1 亿美元的不同代币，包括 FRAX、FXS、wETH、WBTC、AAVE、SUSHI、USDT 和 BUSD。这些代币在 Uniswap 上兑换成 ETH。
Harmony 首席执行官 Stephen Tse，推文6 月 25 日：
没有证据表明智能合约代码被破坏。没有发现 Horizon 平台存在任何漏洞的证据。我们的 Harmony 区块链共识层仍然安全。
根据数据来自以太扫描，攻击中使用的黑客钱包将大约 18,000 ETH（2,100 万美元）转移到二级钱包。然后，黑客使用这个二级钱包向三个不同的地址发送了大约 6,000 ETH（700 万美元）。
其中两个钱包将 ETH 转移到 Tornado Cash 路由器。和谐提供 两天前悬赏 100 万美元以追回被盗资金，但这似乎还不够。转移仍然发生了。此外，Harmony 表示，如果窃取资金的人帮助追回资金，他们将不会支持刑事指控。
加密货币黑客更喜欢使用 Tornado Cash 兑现，因为该协议很难追踪钱包到钱包的转账。然而，用户可以使用零知识技术在以太坊协议 Tornado Cash 的帮助下消除将他们的链上交易捆绑在一起的联系。
相关阅读 | 表明以太坊可能进一步缩减 50% 的指标
在历史上最大的加密货币攻击之一中，朝鲜政府黑客在 3 月份从流行的赚钱游戏 Axie Infinity 中窃取了超过 6 亿美元的以太币。他们将部分收益发送到 Tornado Cash 上的一个账户。
之后，Tornado Cash 在加密货币窃取者中变得越来越流行。到 2022 年，Meter、Wormhole、Ronin 和现在的 Horizon 代币桥已通过非法方法被利用超过 10 亿美元。
来自 Flickr 的特色图片和来自 TradingView.com 的图表
Elon Musk’s D.O.G.E initiative under Trump aimed to cut federal spending, but costs still climbed. Despite shutting 11 agencies, ending foreign aid, and cutting $10B from education, the budget grew—and 240,000 government jobs were lost. Was D.O.G.E a cost-cutter, or just a reshuffle?
CatherineThe SEC has closed its investigation into PayPal’s stablecoin PYUSD without taking any action. This clears the way for PayPal to expand its crypto plans, including partnerships and a new rewards programme for users.
AnaisAvi Eisenberg was sentenced to 52 months in prison for possessing over 1,200 CSAM images, while still facing legal fallout from his $110M Mango Markets exploit. Though convicted of crypto fraud, his lawyers seek a retrial—raising questions about whether the punishment fits the scale of his crimes.
CatherineMalaysian authorities seized 45 illegal Bitcoin mining machines worth $52,145, part of a broader crackdown on operations causing $8,342 in monthly electricity theft. While no arrests were made, investigations continue amidst rising losses tied to international groups exploiting the region’s power grid.
KikyoKraken caught a North Korean hacker trying to get a job by spotting inconsistencies during the interview process. The crypto firm used the opportunity to uncover a network of fake identities linked to state-backed cybercrime.
AnaisMesh has partnered with Apple Pay to enable seamless crypto payments for consumers, with merchants receiving stablecoin payouts—no crypto infrastructure required. The integration will launch for both online and physical retailers by Q2 2025.
CatherineEthereum R1 launched as a new layer-2 solution without a token or central control, aiming to keep Ethereum scaling neutral and decentralised. It runs on donations and has sparked debate about whether token-free models could shape the future of Ethereum’s ecosystem.
WeatherlyA licensed Black Mirror token is launching, using AI to assign dynamic reputation scores based on blockchain and social activity. Powered by a virtual assistant named Iris, the system rewards high-scoring users with airdrops and perks—blurring the line between digital behaviour and real-world incentives.
KikyoBithumb has been added to South Korea's conglomerate watchlist, requiring stricter financial regulations due to its rapid growth in 2024. The Fair Trade Commission also included four other companies, while moving Dunamu to a lower category, as part of its ongoing efforts to regulate large firms in key sectors like crypto and defence.
AnaisThe U.S. Treasury has proposed cutting off Cambodia’s Huione Group from the American banking system due to its role in laundering billions linked to cybercrime, including funds tied to North Korea’s Lazarus Group. Authorities say Huione helped move stolen money through scams and crypto platforms, making it a key player in global online fraud.
Weatherly