Today we’re staring a new serie which is called “Defi Hacks Explained”.
The DEFI and crypto world needs better education and better security.
I am on a mission to make DEFI better and more secure and that’s why I decided to create the new “Defi Hacks Explained” Youtube serie.
Every time we will pick an interesting DEFI Hack case study and we will learn everything about it. We will analyze it form edge to edge including how the attack happend, how money was stolen, and how we could prevent it.
The first episode in the serie is about the Harmony Bridge Hack.
$100M were stolen because of signatures theft and not on-chain smart contract exploits.
We can see here traditional spear-phishing hacking in the “new” DEFI space.
And the results are catastrophic.
In the video we will learn:
* What are bridges
* How bridges work
* How Harmony bridge works
* How Harmony bridge was hacked
* How the money was stolen
* How the attackers “laundered” the money through Tornado Cash
* Assumption of the attackers identity
* How this whole story affect DEFI in the macro level
It’s gonna be super interesting and I’m excited – let’s go!
Reky.news Article About Harmony Hack:
Harmony ETH Bridge Exploited Contract:
Harmony Bridge MultiSig Wallet:
Harmony Signature 1 That Was Compromised:
Harmony Signature 2 That Was Compromised:
Mudit Gupata Twitter Summary:
BUSD Tip Jar:
01:10 Harmony Hack – $100M Stolen
01:30 Presentation Subject
02:20 Crypto Bridge Explained
03:20 How Blockchain Bridges Work
05:20 Harmony Blockchain Bridge
06:40 Harmony Bridge Architecture
08:00 Stolen Signatures
08:30 Harmony Bridge Smart Contract
09:20 Harmony Bridge MultiSig Wallet
11:30 Stealing Funds From The Bridge
12:20 Diving Into The Transactions
14:15 Harmony Team Offers A Bounty
15:55 Mixing Funds Using Tornado Cash
16:50 Open Questions
18:30 Bullish Or Bearish For DEFI?
20:00 Outro And Summary
⚠️⚠️⚠️ #DEFI #Hacks #Harmony #Bridge #Hack #Explained #Exploited #blockchain #ethereum #NFT #Coin #tokens ⚠️⚠️⚠️
The content in any of Johnny’s Youtube videos shall not be construed as tax, legal, insurance, construction, engineering, health & safety, electrical, financial advice, or other & may be outdated or inaccurate; it is your responsibility to verify all information.
I do not provide personal investment advice and I am not a qualified licensed investment advisor.
I am just sharing my knowledge and my findings.
Music By Yoad Ronen:
Until next time,