Harmony is excited to kick-off the $1 Million “Bridging TradFi to DeFi” hackathon

This hackathon is an opportunity for web3 and web2 developers to get together and build exciting apps, protocols, and tools. Our tracks and themes give guidance on some of the ideas relevant and needed in crypto today. Check out the tracks, timelines, prizes and schedule below.

2021 has been about driving adoption of the Harmony ecosystem. We recently celebrated the 2 years anniversary of our mainnet. We’ve learnt to adapt to the remarkable growth and changing needs of the crypto space. Since early this year, our mandate has been to help scale Ethereum applications. We put all of our efforts in ensuring Harmony is fully EVM and Ethereum tooling compatible. “Developers should face zero-friction while deploying apps on Harmony” was our mantra.

With the growth of different scalability solutions and application specific blockchains, we also started to see the possibility of a multi-chain world. Our team started to address this by building bridges with Ethereum, Binance Smart Chain, Terra, Polkadot and soon Bitcoin and Cosmos. We believe it’s our job to abstract away the pipes and tunnels of this multi-chain world for developers and users by enabling interoperability infrastructure.

On the developers front, we have conviction on two things.

First, existing web3 developers will need support in this multi-chain world. They would like their applications to serve users and communities across different blockchains. Their applications benefit the most, by supporting cross-chain assets and transactions. We are already seeing some of the top DeFi (i.e. Sushi on Harmony) and NFT protocols launch on multiple platforms.

Second, we need to bring more web2 developers into the web3 world. We can’t afford to just build tools and applications to serve existing crypto developers and users only. We need to increase the absolute number of developers building in crypto. This is the only way we can have a chance of going mainstream.

Our platform and tools are ready for developers

Developers can use existing web3 tools to deploy their applications on Harmony, with 2-second transaction finality and 1,000x lower fees than Ethereum. Our Horizon bridge helps developers and users to migrate assets in a permissionless manner across EVM chains.

As DeFi and NFT applications deploy on multiple scalable platforms, we’ve noticed developers feeling the pain with end-points (APIs/RPCs) reliability. To support exponential transaction growth, Harmony is working with partners to provide dedicated infrastructure support for application developers so that they don’t have to worry about running their own infrastructure.

Recently when SushiSwap deployed on Harmony, we battle tested deployment and support tooling for web3 developers. They were easily able to i) deploy the original SushiSwap contracts as is, ii) deploy the swap frontend, iii) deploy the subgraph on Harmony to support analytics, iv) use the Gnosis multisig for rewarder contract, v) use the horizon bridge to bring initial liquidity (SUSHI/xSHUSHI ERC20) to kick start farming, and vi) leverage our upgraded etherscan-like explorer to track transactions and draw insights.

Our traction over the past 6 months

We experienced an exciting phase of adoption over the last 6 months. Some metrics below

• 135k wallets
• Over 85 million mainnet transactions
• Over 17,000 delegators and 115 validators, staking 4.6 billion ONEs ($375m staked)
• 2,000 creators and $500k sales on DaVinci NFT marketplace
• 50+ active Dapps
• $85 million TVL on Harmony’s bridge to Ethereum and BSC
• $80 million TVL on Sushi on Harmony, and $100 million combined with other community DEXes

We’re excited about the upcoming tooling and protocol integrations that will unlock the growth stage for NFTs, DeFI and DAOs on Harmony. We’re not shying away from inviting existing mature projects to deploy and unlock new users and communities on Harmony.

DaVinci, the community-led NFT marketplace on Harmony recently launched its governance process and the VINCI token. With the growth of creator communities, marketplaces and collector DAOs, this is a great time to innovate.

We are also seeing some great experiments with DAOs on Harmony. Our community and validator DAOs are working on mandates to continue to grow the community and decentralize the network. Each DAO works on executing 3 mandates, elects 9 governors, and manages a budget with self-assessed pay. We believe that for DAOs to scale to become the coordination mechanism for millions of people, Harmony can provide the infrastructure and the tools (DAOHaus, Snapshot, Gnosis Safe, etc.) for DAOs to scale to country size scale.

Here’s an update on last month’s progress at Harmony.

Come Build with us

We’ve picked these themes and tracks to help developers explore the most interesting problems to solve in the crypto space today. Check out Stephen’s detailed explanation of the Hackathon themes in his recent post.

Harmony’s $1M Hackathon & DAO on Building Bridges

One example of a key innovation that needs to scale in the crypto space today is Social wallets with Keyless security. “Wallets are becoming the Web3 portals as a DeFi dashboard for asset swaps and investments, a NFT gallery for collectible editorials and auctions, or a DAO townsquare for governance votes or payrolls. Our hackathon encourages seamless onboarding and incentivized education for smart contract wallets; builders can start from our audited prototypes featuring authenticator-based security and on-chain account recovery.”

stephen tse | s.one on Twitter: "our three themes - each with $300k prizes in 4 tracks: trustless bridges, social wallets, fintech integrationswinners of each track are going to create a #dao for additional $40k grants based on their mainnet launch, project funding & dao participationhttps://t.co/oVN11gnKkX / Twitter"

our three themes - each with $300k prizes in 4 tracks: trustless bridges, social wallets, fintech integrationswinners of each track are going to create a #dao for additional $40k grants based on their mainnet launch, project funding & dao participationhttps://t.co/oVN11gnKkX

Check out two audited prototypes for smart contract wallets that developers can use:

1Wallet: https://talk.harmony.one/t/1wallet-an-unconventional-keyless-wallet/1958

SmartVault: https://talk.harmony.one/t/smartvault-smart-contract-wallet-with-worry-free-recovery-and-dapps/1933

The guidelines on all the tracks and prizes can be found here: https://talk.harmony.one/t/1-million-hackathon-prize-and-grant-guidelines/1949

We believe that the hackathon is a great launchpad for you to build the next valuable DeFi protocol, middleware tool, NFT platform, and DAO. We will be supporting the participants with follow-on grants and funding.

Venture Introductions and Seed Funding

For certain projects and winners, we are happy to make introductions to our keiretsu of venture relationships for additional funding.

With our partner Dorahacks, projects will receive community matching and potentially also venture capital investor interest from their 60+ investor community.

Schedule

In addition to the hackathon, we will have a series of workshops, fireside chats, panel interviews, office hours, and check-ins. The schedule is TBD but will be announced soon. In the meantime, here are the key dates:

• July 15, Open Registration
• August 16, Hackathon begins, Opening Ceremonies
• August 17, Team Formation (details TBD)
• August 20, Submit Team names and team members
• September 15, Mid-point Demo Day (optional, depending on interest)
• September 30, Submission Deadline, Hackathon ends, Closing Ceremonies
• September 30-October 5, Judging
• October 6, Winners Announced
• October 11, Payouts Completed

Important Links

• Developer Docs: https://dev.harmony.one/
• Getting Started: Getting Started — Harmony
• APIs: API — Harmony
• Dapp Templates and Tutorials: DApp Samples — Harmony
• Codebase: harmony-one · GitHub
• Horizon bridge smart contracts: GitHub — harmony-one/ethhmy-bridge: Ethereum<>Harmony two way bridge (onchain multisig version)

Contact Us / Get Developer Help

• Developer Forum: https://talk.harmony.one/
• Discord: Harmony

Harmony’s $1 Million Hackathon — Time to BUILD was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

Today, the Harmony community is launching the first of its kind subdomain NFT on the Harmony blockchain. These will be live internet domains and each one is unique and non-fungible by design.

The Harmony Foundation owns the crazy.one domain name and we are giving the community the ability to own your personal crazy.one subdomain which is both a NFT and can additionally be linked to your Harmony ONE wallet address via Harmony’s domain name service.

Own your own content

Blockchain domains enable open, transparent and censorship resistant ownership of content on the internet. These domains essentially look like NFTs. We see a future where anyone can truly own space on the internet, by linking their virtual identity to it. Especially when you want to be a part of different communities or tribes on the internet, like ‘The Crazy Ones’.

“Here’s to the crazy ones. The misfits. The rebels. The troublemakers. The round pegs in the square holes. The ones who see things differently. They’re not fond of rules. And they have no respect for the status quo. You can quote them, disagree with them, glorify or vilify them. About the only thing you can’t do is ignore them. Because they change things. They push the human race forward. And while some may see them as the crazy ones, we see genius. Because the people who are crazy enough to think they can change the world, are the ones who do.”

How does this work?

Anyone can now claim their sub-domain on https://crazy.one by simply completing a transaction on Harmony — within 2 seconds! This is a unique combination of NFTs + blockchain name service + live subdomain service. Your subdomain will be live on the internet and it can serve as your unique identity within the Harmony dApp ecosystem and community.

For example, you could register the following: “satoshi.crazy.one” using your ONE address.

1. Visit https://crazy.one
2. Choose your subdomain and check the availability
3. Pay the rental fee in ONE using metamask.
4. Add your twitter profile to link it with your live sub domain.

Please note: this is a ONE year RENTAL, not a purchase. This project is also a mechanism by which the Community DAO will be able to generate revenue. As the Community DAO stands up, it will take over the management and operation of Crazy.ONE subdomains and the Harmony Domain Name Service. We are eager to see how this project evolves based on the community aspirations.

A project for the benefit of the community

Crazy.ONE subdomains is not a “for-profit” concern. All of the tokens used to pay for registration of the subdomain will go directly into the community DAO wallet whose sole purpose is to support the community. Thus, not only will the user experience on the Harmony blockchain drastically improve, this will be a sustainable way for the community to fund Harmony ecosystem projects and initiatives.

stephen tse | s.one on Twitter: ""here's to the crazy ones. the misfits. the rebels. the troublemakers. the round pegs in the square holes. the ones who see things differently...because the people who are crazy enough to think that they can change the world, are the ones who do."https://t.co/Whex5mS1oI pic.twitter.com/iOF78Jqeq3 / Twitter"

"here's to the crazy ones. the misfits. the rebels. the troublemakers. the round pegs in the square holes. the ones who see things differently...because the people who are crazy enough to think that they can change the world, are the ones who do."https://t.co/Whex5mS1oI pic.twitter.com/iOF78Jqeq3

Being a part of the Crazy.ONE tribe

For every 100 crazy.one NFTs purchased by the community, we will create a Crazy.ONE NFT using the Harmony logo that has 100 pixels and each pixel is ONE of the 100 owner’s twitter profile picture. We will then drop this NFT into the wallets of those 100 sub-domain owners. This will become one of the official badges of our Harmony tribe.

Here’s the process:

Your personal live subdomain

We love interacting with our community and Twitter is an excellent place to ask and answer questions. To engage, not only with the Harmony community, but also with the wider ecosystem, version 1.0 of the crazy.one subdomains project is that your twitter feed (if you link it while registering your Crazy.ONE subdomain) will automatically be shown on your crazy.one page. As the project matures and progresses, we are sure other interesting use cases will be deployed by the community.

Utility of subdomains within the Harmony ecosystem

We will soon enable the Harmony domain name service, called ONE Names. With this you can link any Harmony address with a human readable name, example: ‘satoish.one’. Harmony ONE wallet, Block explorer and dApps will integrate this and let you send/receive Harmony assets based on your .one names, instead of your hexadecimal address.

Would you like to know more?

We are excited about bringing Crazy.ONE to the Crazy Ones and look forward to what the community will be building next. In the meantime, if you are interested in digging into the technical details, please follow the links below.

Until then, let us never doubt that a small number of determined individuals can change the world. Because that is the only thing that ever has.

Technical details

This smart contracts were deployed with a migration script: https://github.com/harmony-one/subdomain-registrar/blob/one-names-v4/migrations/2_deploy_contracts.js

Mainnet contracts:

Base:

ENSRegistry: 0x3fa4135B88cE1035Fed373F0801118a3340B37e7

PublicResolver (resolver.one): 0x48D421c223E32B68a8973ef05e1314C97BBbc4bE

Subdomain Register:

SubdomainStorage: 0x22c02eEaDFa5C68f6E1490bda78129e99FbeDaE1

EthRegistrarSubdomainRegistrar: 0x43B2b112ef03725B5FD42e3ad9b7f2d857ed4642

domain: crazy.one

Referral Address: 0x45e93f46604F69BEC2bB52C83eB029380E6efef7

1 level Domain Register:

BaseRegistrarImplementation: 0x27f18e91DB75C57aE00B75F0103F8036ee23E330

ETHRegistrarController: 0xbed36523Cc78c8093Cd0e4a6730E4c60bDC48B05

DefaultReverseResolver: 0x7e1c6695D2563c27E49C4F0adA5F20AA7d978aD8

ReverseRegistrar: 0xF791552B1B634b2b2ad7C235AF93AEba150F7FFb

Additional:

DummyOracle: 0x6f2b31397b6f5aa8Af315e10f46EBc18Ba4E727A

StablePriceOracle: 0x08A7E4b92286BECe48C8f0F8519f93357C8DAE38

Harmony Community Launches Crazy.ONE, The First subdomain NFT was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

Harmony launches support for Gnosis Safe, enabling developers and users to practice stronger security standards through multisig transactions.

Harmony is fully EVM and Ethereum tooling compatible and we are witnessing great developer activity in the recent weeks. Users have been able to use decentralized exchanges, NFT marketplaces, Ethereum and Binance Smart Chain bridges on Harmony easily with Metamask connected to the Harmony network.

As early adopters deploy and use these applications, we are excited to see the first few governance proposals within some of these communities.

For example, check out the discussions and governance activity on validator network governance, Venom DAO, Mochi Swap.

Taking the safety and security of transactions and assets within the Harmony ecosystem to the next level, we are excited to launch support for Gnosis Safe, a leading multisig solution. This will enable smooth decentralized governance across many upcoming initiatives within the Harmony ecosystem.

Gnosis Safe Multisig on Harmony

With Gnosis Safe on Harmony, developers and users can:

• Setup a multisig wallet, called a safe.
• Create and manage the multiple wallet addresses that participate in multi-signature.
• Set the threshold number of signers for a multisig transaction to go through.
• Track and manage all multisig transaction activity
• Track and receive assets on the multisig wallet account
• Set spending limits for the owner accounts.

A quick sneak peak of the interface is below, but read the detailed documentation to get started.

Gnosis Safe operates using smart contracts and is completely non-custodial. The original codebase has been audited and formally verified by the Gnosis Safe team. Harmony has forked this multisig implementation. Here’s the repos for you to review on Github: contracts, transaction service, front-end. We thank the Gnosis Safe team for building such a useful product to enhance security of blockchain transactions and assets.

Get Started

Read the full documentation on how to setup multisig on Harmony. Right now Gnosis Safe on Harmony will work with Metamask wallet only. In the coming days, we will add support for other wallets that support Harmony assets.

Gnosis Safe Multisig now available on Harmony was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

The Harmony and Binance Smart Chain bridge is now live at bridge.harmony.one

In November 2020, Harmony community launched the Horizon bridge that connects Ethereum and Harmony blockchains. Users have been able to bridge their Ethereum assets (ETH, ERC20, ERC721) over to Harmony. Now we are adding support for bridging BNB and BEP20 assets over to Harmony.

The Binance Smart Chain bridge will open the gates for the Binance Smart Chain assets and applications to freely interact with the Harmony blockchain and its growing application ecosystem.

Why bridging with multiple blockchains?

DeFi protocols and NFT marketplaces are already being launched by the community. The Horizon Bridge connects Harmony with Ethereum and Binance Smart Chain, and later will add support for Polkadot, Bitcoin and Cosmos.

These developments will not only enable existing Ethereum applications to scale, but also speed up innovation around multi-chain applications, such as multi-chain, non-custodial decentralized exchanges.

Technical Overview

The Binance Smart Chain bridge has a similar architecture to the Ethereum bridge. It follows the same lock and mint, and burn and unlock asset flows whenever an asset transfers over the bridge. The smart contracts are a replica of the prior Ethereum bridge contracts which have been audited by PeckShield. To get an in-depth overview, you can revisit the bridge architecture in this post.

While the contracts of the Binance Smart Chain and Ethereum bridges are separate, you can access both the bridges using the same front-end and connect your same metamask account to migrate assets across multiple networks.

An important thing to note is that the bridge treats each asset coming from a different chain uniquely.

For example, Alice wants to bridge over 10 USDT (ERC20) from Ethereum. Whereas Bob wants to bridge over 5 USDT (BEP20) from Binance Smart Chain.

In the bridge design, 10 USDT (Ethereum) and 5 USDT (Binance Smart Chain) will be minted by separate contracts. As a result, the bridge will give 10 ethUSDT (HRC20) to Alice and 5 bscUSDT (HRC20) to Bob. These USDT tokens will be treated as two different assets by the bridge.

For now, a user will not be able to bridge USDT (and similar assets that exist on both chains) from Ethereum directly to Binance Smart Chain. Soon, decentralized exchanges on Harmony will make this flow easy for users by introducing liquidity pools between ethUSDT-bscUSDT.

An alternative design choice was for the bridge to aggregate liquidity for the same asset coming from different chains. Which means, in our above example, the bridge would mint the same USDT (HRC20) asset on Harmony whether the USDT was coming from Ethereum or Binance Smart Chain.We explored various security and trust assumptions for both these design choices.

We recommended solving for the liquidity aggregation at the application layer, instead of the bridge layer.

The bridge should have a simple, lightweight and trustless architecture. Various applications like a decentralized exchange (AMM) can introduce new contracts for pooling or aggregating liquidity of the same but multi-chain asset. We invite proposals from our developer community to solve these new horizon issues as we enter the multi-chain world.

Get started with the Binance Smart Chain Bridge by following this step-by-step guide!

View all the Bridged Assets under the ‘Assets’ tab

View the status of Bridge transactions under the ‘Transactions’ tab

Note: At launch, you can bridge any BEP20 assets from Binance Smart Chain to Harmony. Support for migrating native BNB to Harmony, and for migrating native ONE to Binance Smart Chain will be launched by end of this week.

JavaScript is not available.

Launching Harmony — Binance Smart Chain Bridge was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

Over the past few months, we have met with many developers, organized a few hackathons, conducted community calls, followed the spectacularly exploding DeFi and NFT space — all of this to understand what are the hurdles for developers to grow and scale their applications, and what prevents millions of more users to benefit from decentralized finance, social money and digital collectibles communities powered by blockchain.

The answers and insights are rather practical. Developers and users are already familiar with the mature Ethereum ecosystem but are looking for lower fees and faster transactions. Porting assets and deploying applications to a new platform needs to be simple, it should only take from a few seconds to a few minutes. This drove us to prioritize completing a full Ethereum tool-chain support on Harmony — Developers can now easily port their applications already written using ether.js or web3.js onto Harmony. Users can use the Metamask wallet to transact their assets on Harmony, without worrying about high fees or latency.

What Ethereum compatibility already exists on Harmony?

1. Harmony is fully EVM compatible, already supporting Ethereum v1.9.9 Muir Glacier.
2. Ethereum-Harmony Horizon bridge, using which you can bring ETH and ERC20/HRC721 assets to Harmony and take ONE and HRC20/HRC721 assets to Ethereum, in a permissionless way. Try it out here.
3. Deploy smart contracts using Truffle and Remix.

What are we launching today?

As of Epoch 442 (Thursday, February 4, 2021, ~10am PT), Harmony will support Ethereum RPC, which means we can now recognize the Ethereum transaction data structure.

What does this mean:

1. Users can now connect to the Harmony network using Metamask wallet.
2. Users can create accounts, send and receive transactions of native ONE or HRC20/HRC721 using Metamask.
3. Users can interact with dApps written using web3/ether.js but deployed on Harmony, simply using their Metamask account.
4. Developers can directly deploy dApps written using web3/ether.js on Harmony.

If you’re keen to know details about how we made this happen, here’s a technical snippet.

Harmony’s transaction data structure includes two additional fields, ‘ShardID’ and ‘ToShardID’, on top of Ethereum’s transaction structure. Metamask didn’t work with Harmony out of the box since any transaction submitted by Metamask to the Harmony nodes across shards would not have the ‘ShardID’ and ‘ToShardID’ fields and as a result be rejected.

To solve this, the core developers proposed a new logic that lets shards recognize the original Ethereum transaction data structure without ShardID and ToShardID in it. This way the original Ethereum transaction can be treated and processed as an intra-shard transaction.

Now, Harmony reserves a unique ChainID for each shard and assigns transactions to shards based on the ChainID, which can be derived from the V field of the txn signature. With this change introduced in the latest node-software, the new transaction type can be accepted and processed by the validators across shards, making Harmony fully-compatible with existing Ethereum tooling.

How to navigate between Harmony and Ethereum address format?

For each Harmony account address (‘one…’), there is a corresponding Ethereum address format (‘0x…’). You can easily find the ONE-Ethereum corresponding address pair on the Harmony Explorer, just toggle to switch between the address format.

ONE address

Ethereum address

Note: when using Metamask to send transactions on the Harmony network, you have to specify the corresponding Ethereum address format (starting with ‘0x’), instead of the ONE address ( starting with ‘one’). On the Harmony ONE wallet, you can send transactions using either the ONE or corresponding ETH (‘0x’) address format.

What can users and developers do?

Connect Metamask with Harmony. You can find detailed instructions here.

Harmony custom RPC for Shard 0 on mainnet

• Network Name: Harmony Mainnet S0
• New RPC URL: https://api.harmony.one
• Chain ID: 1666600000
• Currency symbol (optional): ONE
• Block Explorer URL (optional): https://explorer.harmony.one

After connecting Metamask with Harmony Shard 0 on mainnet, you can easily do the following:

• Import an existing Harmony account into Metamask using your private keys.
• Create a new Harmony account directly on Metamask, which can later be imported into ONE wallet, if needed.
• Receive ONE and HRC20 tokens in your Metamask account from any Harmony account.
• Send ONE and HRC20 tokens from your Metamask account to any Harmony account, using the Ethereum address format of the recipient account.
• Search for your transaction history on Harmony block explorer, using your Ethereum or Harmony address format.

If you’re a developer, read more about how to deploy smart contracts directly using Metamask, deploy applications using web3 (ether.js coming soon) on Harmony.

We are excited to have these Ethereum compatibility layers on the Harmony stack.

Tune into our ETHDenver workshop by Ganesha Upadhyaya on Feb 7th, 12.30pm MT, who will talk about how to migrate solidity contracts to Harmony with minimal changes, using Metamask and Ether.js with our network endpoints, and building cross-chain applications with our bridge. A cross-chain Uniswap fork is already live on our mainnet.

Let’s BUIDL!

Harmony as Interoperable Layer-2 for Ethereum

6/ As an Interoperable Layer 2, Harmony offers the exact same set of tools which are most familiar to Ethereum developers and users, including web3.js, ethers.js, truffle, @metamask_io and many more. To use these tools, they just simply switch the chainID to Harmony's chainID.

Launching Full Ethereum Compatibility on Harmony was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

Following are the fixes and additions from the previous version (1.0.7):

Security

* Tab response hijacking protection

* Safe hostname detection

• We detect the safe hostname enabling users to sign only one transaction at a time. This prevents hijacking of transactions.

* Private data is unreachable in page’s javascript runtime

• All user info (private key, password, pin) is encrypted with PBKDF algorithm. It is not possible to brute-force attack the password, and third-party websites can’t access the extension’s storage directly.

Features

* Displaying suggested human-readable method with input arguments when signing a data tx

• We decoded the input data to a human-readable method (like etherscan.io) so that users can verify that they are signing the correct transaction.

You can continue to use the ONE wallet for storing and transacting your ONE & other Harmony assets.

Update on the ONE wallet exploit incident on 11/18/2020

We were able to identify and work with the hacker to recover the lost funds. As a token of goodwill, the foundation issued a security bounty to the hacker. The foundation has also launched a security bounty fund to promote open development & testing and pre-empt security vulnerabilities and attack vectors for our infrastructure and tools. Feel free to reach out at security@harmony.one.

We were also fortunate to work together with the affected users in getting vital information about the incident. We have already refunded the hacked funds to the known affected users.

We thank our community and security partners for their support.

ONE Wallet Update was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

Summary

1. Blockchain & cybersecurity firm PeckShield is conducting the root-cause investigation.
2. We’re working with the affected users and various investigating agencies for recovery of lost funds.

Update from PeckShield based on the investigation so far

Dr. Jeff Liu — “Per Harmony’s request, PeckShield team investigated the Harmony ONE token loss incident. We first checked the issue discovered by the Harmony team, OneWallet saving user credential data in the Chrome Storage. We recognize that this may be a potential security vulnerability and has been subsequently fixed in the latest version 1.0.7, we shall share an audit report of this wallet soon. But to exploit the ONE wallet chrome extension, the hacker needs to get access permission of the users’ computers. Based on reviewing some of the affected users logs and browsing history, we didn’t find any concrete proof that this has happened in this incident. Therefore, it’s likely that this is not the root cause of this incident. We also investigated the possibility that the users are using forged OneWallet software, but again there we have not found evidence of this yet.”

We are exploring all other social attack vectors for this incident.

Working with the affected users & community

Members of the community are now actively working on the root cause analysis, and with several exchange partners and investigating agencies to find the attacker and pursue legal action. Several members of the community are also actively working together with the known affected users.

The affected users have provided as much information about the exploit to community members leading the recovery effort. We are also committed to assisting in the recovery of the lost funds. We will keep the community updated on all the details as the investigation progresses.

Thank you for being patient with us, we value our community’s commitment and support.

Update #2 on wallet exploit incident was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

On November 18th, we received reports of lost funds, mysteriously missing from 9 wallets at the time of this writing.

The Facts (as of 11/20/2020)

A total of 25,356,279.23 ONE tokens were removed from 9 wallets.

Affected wallet addresses

• one14y4y0avdhlwfmvufxkch53q57stwmctg002vlv
• one1r3fhhzzzatcmqx62nszqxf3shk8qk7qhlmg7tk
• one10wgvlxx85vwcfk43g0vzss95er80uneh2h80hv
• one13gv9shkzs847ayy6ggjxssv9g73jlvydlem2ra
• one1hrgflaj09mh497qczhmzrnee4vxygtsjqx52mq
• one1rcv3chw86tprvhpw4fjnpy2gnvqy4gp4fmhdd9
• one16xh2u9r4677egx4x3s0u966ave90l37hh7wq72
• one12cswq02gkn3r5cfpy3t0ep0vn2t3cvn3a38ltn
• one14rjfcpf2c2rw48p3evunylpag402c37jpg38um

Alleged attackers addresses

• one1qclwtjg85cx4kfcxj3t284p908knldvfwk53ps

What Harmony Did to Contain the Problem

As a team, we immediately went into all-hands on deck mode. Here are the steps we took to contain the problem:

• We contacted major centralized exchanges and informed them about the attacker’s activities and ONE wallet address.
• We rolled back to a prior version of the ONE Wallet, details published in this post.
• We met with and contacted current and prior employees to do a thorough internal security investigation.
• Met with our security partner, PeckShield and others, to conduct root cause analysis

What We Know About the alleged Attacker

We are still investigating the origin of the attack. Exploits and attacks can happen in a lot of different ways and it’s too early to come to any conclusions. Be rest assured that we are taking every possible precaution we can to keep our community safe. What we do know is that only 9 addresses have been exploited which seem to suggest that this could’ve been a targeted attack.

Based on forensic evidence we’ve collected we know that the alleged attacker used a KYC’d account on a major centralized exchange, giving away personally identifiable information in the process of carrying out the attack. We’ve also collected other evidence about the attacker and we know where he or she keeps the stolen funds. We’ll actively monitor these addresses and track every single move and work together with exchanges as well as law enforcement.

Our Offer to the alleged Attacker

We want to give the alleged attacker a chance to return all the funds. If you do so, we won’t pursue further legal steps, dox your identity in public, or take any further action. As an act of goodwill, when all the funds are returned, we will offer you a bounty to uncover how the attack was executed.

We also invite our community to help us uncover the attacker or any traces related to this attack.

We will give you until midnight UTC 11/23/2020 to accept or reject our offer.

Thanks to our Community

We have made several announcements to the community to take precautionary measures. We will also keep you updated with more facts and remedies in the coming days.

We want to give a huge shoutout to our community for rallying together during this confusing and difficult time. Thank you for your support. We also thank our community managers for being so in tune with the community, our engineers for bending backwards to get to the root cause, our security partners for helping us.

Tough times make good teams into great teams. We’ll use this as fuel to make Harmony even stronger and the community even more unified.

Update on the November 18th Exploit was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

(This blog is originally published on Oct 19, 2020 and now reposted here.)

Harmony on Twitter: "🌓 Introducing Horizon: An Ethereum-Harmony Cross-chain bridge 👇https://t.co/5t4nLvhUGH pic.twitter.com/tyNHX7qE31 / Twitter"

🌓 Introducing Horizon: An Ethereum-Harmony Cross-chain bridge 👇https://t.co/5t4nLvhUGH pic.twitter.com/tyNHX7qE31

ho·ri·zon /həˈrīzən/: the line at which the earth’s surface and the sky appear to meet.

Harmony has launched Horizon, the first version of its Ethereum-Harmony cross-chain bridge, on the mainnet. This is the foundation of many upcoming initiatives designed to bolster a vibrant crosschain ecosystem on Harmony that will allow users and developers to smoothly interact with multiple chains. When you feel like you have reached the natural limitations of a blockchain, that is where we will meet you — at the Horizon.

Horizon opens up the gates for assets to flow freely between Harmony and Ethereum blockchains and will enable users to bridge any ERC20 token, as well as LINK and BUSD. Horizon will be released in phases with the next phase being fully trustless and permissionless.

Go to https://bridge.harmony.one/ to start using.

Welcome BUSD and LINK on Harmony

Horizon enables the secure bridging of two important assets to our chain: BUSD and LINK. As the first official stablecoin on Harmony, BUSD will pave the way for many of our ecosystem projects to utilize cheap and fast value transfer. With LINK and Chainlink Oracle deployed on mainnet, Harmony ecosystem projects will be able to provide ONE-ETH atomic loans and many more use cases by using trustless oracle.

Technical overview

A bridge is a technology that connects two blockchains by using two flows with the ability to verify crosschain transactions:

i) transfer assets flow: assets are locked on Ethereum and equivalent amount are minted on Harmony

ii) redeem assets flow: minted assets on Harmony are burned and the equivalent amount are unlocked on Ethereum

We optimized for four principles in bridge our design:

1. Trustless: the bridge is as safe as the blockchains that it is connected to, with no additional security assumptions
2. Decentralized: no single point of failure
3. Fast and efficient: facilitates frequent and low gas cost transfers between chains
4. Seamless: hides the complexity of blockchains, no need for entering block hashes, merkle roots

In order to address the critical need for a bridge in the short term, we will follow a multi-phase approach. This initial version of the bridge is focused on providing a seamless and low-cost solution for bringing assets to Harmony in a trusted yet secure manner. The final phase of the bridge will be fully trustless and decentralized.

Ethereum-to-Harmony (transfer assets) flow:

• A user requests the bridge to transfer his/her ERC20s and provides the Harmony address to receive 1:1 HRC20s on Harmony, by authorizing the bridge to lock their ERC20 assets.
• The bridge hosts a set of validators who listen to this request, perform lock, wait for enough block confirmations on Ethereum to ensure finality (finality ensures that the lock transaction never leaves the Ethereum chain).
• Upon confirmation, bridge validators request HmyManager to mint the HRC20 assets and transfer to recipient user account

Harmony-to-Ethereum (redeem assets) flow:

• User requests the bridge to take back HRC20s and provides an Ethereum address to receive 1:1 ERC20s in Ethereum, by authorizing the bridge to burn those HRC20s.
• The bridge validators capture this request, perform the burn transaction on Harmony and request the bridge contract on Ethereum to release the locked ERC20s to the user specified account.

Some key properties:

• The ERC20 to HRC20 mapping is established by the token manager smart contract on Harmony that keeps track of all the bridged tokens (users can verify that the tokens they receive are indeed from the bridged token contracts)
• The user only pays for bringing their assets to Harmony in terms of two Ethereum transaction costs, which requires around 50K gas each (equivalent to 0.0025 ether at 50 Gwei gas price or $0.875 at $350/ether). In total, a user is expected to spend ~$2-$5 for bringing their assets to Harmony. The redeem asset cost is paid by the bridge.
• The time it takes for bridging the assets is under 5 minutes. Similar time for redeeming the assets back from Harmony to Ethereum.
• The bridge is secured by the set of validators who submit their confirmations through the multisig contract about the cross-chain transactions (lock on Ethereum, burn on Harmony).
• The bridge also allows permissioned tokens to be deployed on Harmony to avail the full-features of the token on the Harmony chain. For example, LINK token contract is deployed on Harmony using the actual contract (contract) instead of HRC20 to enable payment to oracle smart contracts on Harmony that will serve ONE-ETH price feed. This feature is essential for partner integrations such as for BUSD and LINK.
• The bridge is fully audited by Peckshield.

Horizon: A Gas-Efficient Trustless Bridge for Cross-Chain Transactions

Next up: Grantees, Hackathon and Trustless Horizon

Many of our grantees and partners have been waiting for the Ethereum-Harmony bridge to launch. In the next few weeks, we expect a surge of bridge transactions and bridged assets on Harmony. A few of these projects to keep an eye on: Unifi Protocol, Swoop Crosschain DEX, Wafflehouse.io, Blits, and more.

Being developer-friendly is one of our top priorities and soon we will release the bridge APIs and supporting services to enable any developer or application to directly utilize Horizon. This will allow any application to swap assets and use them within the application on a single interface.

We are also working towards the trustless and decentralized version of Horizon. A white paper on our novel design is expected to be released soon. It will describe our innovations towards gas-efficient light clients, trustless cross-chain block relayers, and efficient provers and verifiers, while keeping our end goal of: trustless, decentralized, cost effective, and seamless cross-chain bridge.

Introducing Horizon: An Ethereum-Harmony Cross-chain Bridge was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.

A Tech Showcase of a Cross-Chain Decentralized Exchange

After launching the Horizon bridge to swap assets from Ethereum to Harmony, we are excited to announce that our community has launched a technology demo of a cross-chain DEX — Swoop.

Swoop will enable the community to test out the seamless, high-speed and low-fee user experience while exchanging assets in a non-custodial manner on Harmony.

This first version of Swoop demonstrates the easy migration of foundational decentralized finance infrastructure like Uniswap v2 on Harmony, an EVM compatible chain.

The next version, launching in the coming weeks, will be a fully-cross-chain DEX, relying on the Horizon bridge APIs to power cross-chain liquidity. With these launches, the Harmony community is opening the gates for DeFi developers and partners to fork, build and deploy their own DeFi protocols on Harmony, leveraging the fast and low-cost layer-1 infrastructure.

What can you do with Swoop today?

The community can participate in Swoop by adding liquidity to any of the existing pools, creating any asset-pair pools, or trading assets available on Swoop seamlessly — the user experience of Swoop is consistent with Uniswap. This technology demo will help the community get early feedback from users and developers.

The first step before using Swoop is to ensure that you have used the Horizon bridge to migrate your assets from Ethereum to Harmony. Once you have the wrapped assets on your Harmony wallets, you can start playing around with Swoop.

To incentivize the the early users on Swoop, the Pangaea community will be distributing up to 10,000 BUSD as rewards for liquidity providers and traders. The Pangaea community has created three pools to bootstrap activity, ONE-BUSD, LINK-WETH, WBTC-WETH. These three pools will capture the additional rewards mentioned above. In addition to these pools, users can create a new pool for any assets on Harmony. Please review the FAQs for more information about pools and rewards.

This incentives campaign will run for a period of two weeks from launch; with starting block #: 5672429; ending block #: 5914349. Since this is a technology demo, at this time there are no governance tokens attached with Swoop, but the community may retrospectively reward the early adopters with governance incentives in the future iterations.

If you want to try out Swoop, go through the quick FAQs below and jump right in swoop.exchange. Here’s a quick recap by our very own Dir. Schmidt.

The Uniswap v2 migration journey on Harmony

Swoop is a project that was originally conceived during one of Harmony’s hackathons. What was initially considered a simple experiment to port a DEX from Ethereum to Harmony soon turned into a sizable project in its own right — Swoop currently consists of 10 separate implementation repositories.

Throughout Swoop’s lifecycle, the developers tried to stay as close as possible to the original Uniswap V2 code base — both in terms of smart contracts and the UI. The smart contracts are nearly identical to the original Uniswap V2 contracts, with just some minor differences for customizing the LP token names and symbols as well as updating the init code hash for the UniswapV2Pair contract. That’s it.

During the development of Swoop, the Harmony team received feedback about updating the EVM compatibility of the chain — Harmony is now consequently running a much more modern EVM layer.

In terms of the interface/UI, the developers had to spend time rewiring smart contract interactions and changing some interactivity to be compatible with Harmony’s Javascript SDK. Although this took additional effort, it has given us very specific insights on Harmony’s current dApp tooling landscape and what we can improve on our tooling most. As a result, over the next few weeks, we’ll be heads down focussing on:

• Creating a web3-react library compatible with our own OneWallet as well as MathWallet
• Implementing a full feature ethers.js wrapper interacting with our own Javascript SDK under the hood
• Creating a full feature web3.js wrapper on top of our Javascript SDK

The end goal is to create a seamless dApp-porting experience from Ethereum over to Harmony.

Swoop has given us a stark reminder— dApps can be extremely fast on Harmony. And cheap. Our intention with Swoop is to demonstrate what Uniswap can look like when it runs with 5 (and soon 3!) second finality and extremely low fees.

We invite everyone to fork, clone, and create your own version of Swoop. We’ve prepared a detailed guide for how you can deploy your own version of Swoop here.

Start BUIDLing with us!

The Pangaea community will host a video AMA next week, to take developers through a tutorial on deploying Ethereum DeFi protocols on Harmony.

We are really excited for developers to play around with the swoop front-end or checkout the smart contracts. Very soon, developers and DeFi protocols will be able to leverage the Horizon Bridge APIs for adding cross-chain assets to their applications and protocols on Harmony.

With the launch of Horizon, Swoop and related developer tools, Harmony is bootstrapping its cross-chain ecosystem for existing and upcoming DeFi developers and partners. We’re extending an open invitation to come and BUIDL with us.

Swoop FAQs

Shared by the Pangaea community

What is Swoop? How is it different than Uniswap or its clones?

Swoop is a crosschain DEX on Harmony. Swoop-v1 is a clone of Uniswap v2. Later versions of Swoop will have crosschain swap and pool functionality.

Swoop-v1 is a protocol for exchanging HRC-20 tokens on Harmony. It eliminates trusted intermediaries and unnecessary forms of rent extraction, allowing for fast, efficient trading. Swoop prioritizes decentralization, censorship resistance and security. Swoop is open-source under the GPL license.

Swoop-v2 will be a crosschain protocol for exchanging tokens directly between different blockchains, at first Ethereum and Harmony. Swoop-v2 will utilize Horizon-v1 (trusted Ethereum-Harmony bridge) to make crosschain swaps.

How does Swoop work?

Swoop is a constant-product automated market maker protocol. Just like Uniswap, Swoop leverages asset pools on Harmony to enable instant asset exchange.

Is Swoop audited?

Swoop is a technology demo and not officially audited yet. Please use at your own risk. The external audit will be completed in the coming weeks. In case you find any issues or bugs, please report on the Swoop Telegram channel or Github

Which pools are available to join as a LP?

You can add any pools by selecting any two assets on Harmony. During the launch, there will be additional rewards in BUSD for these three pools over a 14-day period:

1. ONE-BUSD
2. LINK-wETH
3. wBTC-wETH

To see all bridged assets and contract addresses on Harmony, go to https://bridge.harmony.one/tokens.

To convert your ETH into wETH or wBTC you can swap on Uniswap and then take the wETH or wBTC to Horizon bridge. To convert your BTC into wBTC you can exchange at one of the partners on https://wbtc.network/dashboard/partners. Alternatively you may be able to swap BTC for wBTC in exchanges, or you may exchange to ETH and follow the above steps for converting ETH into wBTC.

What is the launch incentive campaign?

Launch campaign will last 14-days from the launch. During this period, $10,000 in BUSD will be distributed to early liquidity providers and traders.

Starting block #: 5672429; Ending block #: 5914349

Liquidity provider rewards:

Users will be rewarded for providing liquidity for the first 14 days Swoop is live. In addition to rewards for providing liquidity, there will be a bonus reward based on the number of days that users provide liquidity. Rewards will be calculated on a per block basis, based on the percentage share of the liquidity pool. Note that these rewards are additional to liquidity provider fees. The Swoop team will soon launch a front-end that displays rewards earned by the LPs.

Day 1 will have higher rewards in lieu of early participation. $1,500 worth of rewards will be allocated for the three pools on day 1.

Day 2–14 will have $4,500 in rewards distributed among the three pools.

Additionally, there’s a reward for liquidity providers based on how many days one provides liquidity. There is $1,500 allocated for this purpose. The reward will be calculated at the end of the two weeks when we can calculate how many addresses held LP tokens for how many days. This will allow us to come with the total units. (ie. 100 addresses holding for 14 days is 140 units, 100 addresses holding for 13 days is 130 units, which would make a total of 270 units) $1500 will be divided by the total units and distributed to users based on how many days each held.

You can track liquidity provider rewards for each incentivized pool here:

• ONE/BUSD: http://rewards.swoop.exchange/one_busd
• LINK/WETH: http://rewards.swoop.exchange/link_1eth
• WETH/WBTC: http://rewards.swoop.exchange/1eth_1btc

Trading rewards:

During the campaign period, the Pangaea community will randomly select 10 lucky swap transactions on select days. Owners of the select transactions will be rewarded with $250 in BUSD. Any swap transaction is eligible for this draw, once per address.

Why prices on Swoop may be different than the market?

Prices on Swoop are determined by constant product market maker function. When prices are different, there is an opportunity for arbitrage trades, which in turn will push the prices similar to other exchange venues.

Is there a withdrawal fee?

No withdrawal fee to remove liquidity. Free to come in and leave the pools just as in Uniswap.

Will there be retroactive rewards?

Currently, Swoop has no active liquidity mining program besides the launch incentives program. The governance layer has not yet been built and more information will be shared soon. There may or may not be retroactive rewards for the early users to Swoop, similar to Uniswap allocating tokens to early adopters.

Where can I report any issues related to Swoop?

You can add issues here: https://github.com/harmony-one/swoop-interface/issues

Disclaimer

This project is a tech demo in beta. You understand and expressly accept that the beta version of SWOOP is provided to you at your own risk on an “AS IS” and “UNDER DEVELOPMENT” basis. THE DEVELOPERS OF SWOOP MAKE NO WARRANTY WHATSOEVER WITH RESPECT TO THE BETA DEMO, INCLUDING ANY (A) WARRANTY OF MERCHANTABILITY; (B) WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE; (C) WARRANTY OF TITLE; OR (D) WARRANTY AGAINST INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OF A THIRD PARTY; WHETHER ARISING BY LAW, COURSE OF DEALING, COURSE OF PERFORMANCE, USAGE OF TRADE, OR OTHERWISE.

Nationals and residents of the following countries are restricted from participation: Afghanistan, Cuba, Democratic Republic of the Congo, Guinea-Bissau, Iran, Iraq, Lebanon, Libya, Myanmar, North Korea, Somalia, Sudan, Syria, Yemen, Zimbabwe, and the Crimea region of Ukraine.

The Swoop project is operated by Pangaea Community around the globe and Hemenglian Technology outside the United States.

Swoop: Ethereum-Harmony Cross-chain DEX Launch! was originally published in Harmony on Medium, where people are continuing the conversation by highlighting and responding to this story.