Harmony’s Horizon Bridge Hack: What to Know

Harmony’s Horizon bridge was exploited on June 23, 2022, and attackers stole crypto worth roughly $100 million. The incident was a bridge security failure: Harmony halted Horizon bridge activity afterward, and reports described a compromise of the bridge’s signing controls. It was not evidence that every Harmony wallet or the Ethereum network had been hacked.

The event matters if you held assets that passed through Horizon, are considering using an old Horizon route, or have received messages promising to recover stolen tokens. A bridge can involve contracts, operators and assets on more than one blockchain, so losses may affect particular bridged tokens without affecting every asset on either chain.

If you are checking an old holding, don’t send funds or approve a transaction just to “verify” it. First identify the asset and network in your wallet, then check the transaction history and Harmony’s current official status. Treat unexpected recovery offers, private messages and copied-looking websites as potential scams.

A blockchain bridge lets users move value or a token representation between networks. Depending on its design, a bridge may lock an asset on one chain and issue a corresponding token on another, or use a network of validators or signers to authorize transfers. The original asset and its bridged representation are connected by the bridge’s ability to process deposits and withdrawals.

That connection creates extra dependencies. A user may need the bridge’s contracts, signing mechanism and both chains to work correctly to move assets back. If an attacker gains the authority to approve unauthorized transfers, the bridge can release or issue assets without a legitimate deposit. The risk is different from a user losing a wallet seed phrase, though users can face both kinds of risk.

Horizon’s theft centered on its bridge controls. Reports described a compromise of its multisignature setup. That description helps explain why a bridge can be a concentrated target, but it is not a complete technical post-mortem. Don’t assume that a particular wallet, token or current contract is safe—or compromised—without checking its exact chain and contract address.

The stolen amount is commonly described as about $100 million. Some estimates put it at roughly $103.7 million, so it is more accurate to use an approximate figure than to treat one total as exact. Reported assets included ETH, BNB, USDT, USDC and DAI. Harmony also offered a $1 million bounty after the theft.

A token’s familiar name does not tell you whether it was the native asset or a bridged version. For example, a wallet may show a token called USDC on a network where it represents a bridged claim rather than the token issued on its original network. Check the network and contract address, not just the ticker or logo.

The incident does not establish that every token with one of those names was affected everywhere. Nor does a token appearing in a wallet prove it can still be redeemed. To assess a holding, record the chain, contract address and relevant transaction, then look for current official information about that specific asset. Don’t rely on a token’s price display or a search result alone as proof of recoverable value.

If you may have Horizon-related assets, start with read-only checks. You do not need to connect your wallet to a random recovery site or sign a transaction to find out what you hold.

1. Identify the network. Check the chain selected in your wallet and the asset’s contract address. A ticker or token logo is not enough.
2. Review the transaction history. Look for deposits, withdrawals or token transfers connected to Horizon. Use a trusted block explorer for the relevant chain, reached independently rather than through a message link.
3. Check official status. Harmony halted Horizon activity after the exploit. Before attempting any transfer, confirm through current official Harmony channels whether a supported route exists and what contracts are involved.
4. Do not approve unexpected transactions. A recovery service cannot safely prove ownership by asking for your seed phrase or private key. Never share either.

If you already signed an unfamiliar approval, review and revoke it only through a trusted wallet or security tool that supports the relevant chain. Revoking may cost gas, and it cannot reverse a transfer that has already completed. If substantial funds are involved, get independent help from a qualified security professional.

A bridge hack can leave users facing more than a direct theft. A bridged token may lose its ability to be redeemed if the backing asset is gone, withdrawals are paused or the bridge’s contracts no longer operate as intended. Trading activity or a displayed quote does not guarantee that a holder can withdraw the token for its supposed underlying asset.

Check the exact contract and chain before swapping, depositing or sending a token to an exchange. A platform may not support a particular bridged version even when it supports a token with the same name on another network. Sending it to the wrong deposit network can make funds difficult or impossible to recover.

Use this checklist before acting:

• Confirm the token contract using an official source, not a message or ad.
• Check whether deposits and withdrawals are currently supported for that exact network and asset.
• Read any bridge pause, redemption or migration instructions carefully.
• Test with a small amount only if an official route is confirmed and the cost is acceptable.
• Keep a record of addresses and transaction IDs.

If there is no clear, current redemption path, pause. A token balance in a wallet is not proof that the asset can be moved or redeemed.

Bridge incidents are a reminder to check how a route is secured before connecting a wallet. Look for a plain explanation of who can authorize transfers, whether one party or a group controls upgrades, what happens during an emergency pause, and how users can exit if the service stops. Independent audits can help identify issues, but an audit is not a guarantee against theft or future changes.

Before using any bridge, ask:

• What are you moving? Confirm the token, source chain and destination chain.
• Who controls the route? Understand whether funds depend on a multisignature group, validators or other operators.
• Can you withdraw? Check the exit process and what happens if transfers are paused.
• What will it cost? Account for bridge charges, network gas and any swap fee shown before signing.
• What are you approving? Read the wallet prompt and verify the destination contract independently.

Do not choose a bridge solely because its quote is cheapest or its interface looks familiar. If the security model, token backing or withdrawal procedure is unclear, use another well-understood route or wait. A bridge is an additional point of risk, not a shortcut that makes cross-chain transfers risk-free.

The biggest avoidable mistakes are acting on urgency and trusting a familiar token name. Scammers often exploit major hacks by impersonating support teams, posting fake recovery instructions or promoting counterfeit tokens. They may promise compensation, ask you to connect a wallet, or request a seed phrase. Treat any request for your secret recovery phrase or private key as a theft attempt.

Avoid these actions:

• Clicking a recovery link sent by email, social media or a direct message.
• Signing a transaction you cannot explain, even if the site says it is only a verification step.
• Sending funds to an address that claims to unlock or restore a balance.
• Assuming a token is safe because it has a familiar name, logo or displayed dollar value.
• Reusing an old bridge bookmark without checking the current official status.

If you already shared a seed phrase, consider that wallet compromised. From a clean device, create a new wallet and move any remaining assets that are still transferable; do not reuse the exposed phrase. If you signed a suspicious approval but did not share your phrase, check and revoke relevant approvals promptly, while remembering that a completed transfer cannot be undone by revocation.

Treat Horizon as a historical incident with a current-use question that still needs verification. Harmony halted bridge activity after the June 2022 exploit, but that fact alone does not establish what routes, contracts or recovery options are supported in 2026. Before interacting, confirm the current status through official Harmony channels and check that any instructions name the correct network, token and contract.

If you need to move assets between chains, compare the specific route rather than choosing by brand alone. A canonical bridge such as Arbitrum Bridge is designed for supported Ethereum-to-Arbitrum transfers, while a router such as Squid Router can assemble cross-chain routes. These products have their own network, contract, liquidity and transaction risks; they are not a way to recover Horizon losses or a guarantee of safety.

Use a bridge only when you understand what asset you will receive, how you can withdraw it and what each step costs. Check the wallet prompt, verify addresses independently and avoid approving unlimited access when a smaller allowance is sufficient. If a route’s status or security model is unclear, the safest decision may be not to bridge until you can verify it.