- Hackproofing.com
- Posts
- 💥 $140K Gone—And It Was Totally Preventable
💥 $140K Gone—And It Was Totally Preventable
One imported key. One Chrome extension. And everything was gone.
Learn how to make AI work for you
AI won’t take your job, but a person using AI might. That’s why 1,000,000+ professionals read The Rundown AI – the free newsletter that keeps you updated on the latest AI news and teaches you how to use it in just 5 minutes a day.
Back in late 2022, someone lost over 2 BTC (~$140,000) without realizing how. Months later, they figured it out—and now it serves as a critical lesson in wallet security and private key hygiene.
What Happened:
In 2021, the victim staked $ONE tokens using Harmony's official Chrome extension.
To stake, he imported his main wallet’s private key into the extension.
He assumed “official” meant “secure.”
In reality, the Harmony wallet (like Slope Wallet before it) had a serious vulnerability.
A year later, without warning, his wallet was fully drained across multiple chains.
See Story Here đź‘€
A friend got drained for a bit north of 2 BTC (140k+ USD) back in late 2022.
Back then, he had NO IDEA how it happened.
It wasn't even a signing tx issue.
He only realised a few months ago what the attack vector was and why it could have been COMPLETELY prevented... 👇
— katexbt (paid group peddler arc) (@katexbt)
2:13 PM • Apr 6, 2025
More Info Surfaced on X
People in this space tend to hate on CEXs and opt for full self custody but i think thats wrong. You should keep some portion of your portfolio on well regulated Cexs
They do pose a different risk in exchange hacks but they are very hard to compromise on an individual user base
— pika2zero (@ruggedpikachu)
3:44 PM • Apr 6, 2025
I was around harmony when this happened. Was a good eco for a while, solid defi sprouting then this, UST and the Lazarus bridge hack happened.
This is no exaggeration they literally did exactly that lol
Deprecated, sent some warnings in discord, never spoke of it again and when— hughey (@ninejobs)
8:18 PM • Apr 6, 2025
Remember a few fellow whales getting cleaned out on that one. They did say they conducted a bunch of audits with sec researchers - but the issue was never fixed.
I had my suspicions way back that they had a serious 0-day in how onchain addresses were generated on chain itself.
— Icarus.eth (@CoinerHermes)
8:07 PM • Apr 6, 2025
Digital copies of seed phrases increase the chances of a wallet getting drained.
A hardware wallet is a hard requirement for anyone who stores ≥ $1k on-chain.
— FIP Crypto (on-chain footprint arc) (@FIP_Crypto)
3:36 PM • Apr 6, 2025
Stay Informed!