ZachXBT's statements came shortly after an attack on Harmony, during which the malicious actor minted approximately 4 billion new tokens of the project, ONE. This represents about 26% of the total coin supply. ZachXBT explained that he would not take on the case because the project had previously failed to reward those who helped track the hackers that attacked the Harmony Bridge in 2022.
In June 2022, North Korean hackers breached the Harmony Bridge, stealing $100 million in cryptocurrency. A group of white hat hackers and other voluntary helpers assisted the project in tracking and freezing the stolen assets; however, Harmony never paid a bounty to the dedicated volunteers. ZachXBT claims that Harmony's creators merely expressed gratitude for the help by writing, "Good job."
I will not be tracking this incident and think no one should assist them for free.
— ZachXBT (@zachxbt) August 12, 2026
Harmony took advantage of people who assisted during the $100M Harmony Bridge exploit by DPRK in 2022 and rewarded $0 for significant freezes which lead to LE seizures and simply said “good job”
By refusing to provide assistance to the project, respected crypto industry researcher ZachXBT aimed to promote the idea that developers should properly incentivize security experts and ethical hackers who help investigate incidents and recover stolen funds. Without bounty programs, skilled professionals will not want to spend time and resources identifying vulnerabilities, making blockchains potentially more susceptible to attacks.
Recently, ZachXBT managed to identify an American woman named Tiffany Milanovich, naming her as involved in the theft of $5 million in cryptocurrency. The woman impersonated a customer support representative for crypto services, distributing phishing links to users and then publicly bragging about the stolen assets.
end-content
