Harmony

An attacker exploited a flaw in Harmony's block-production logic to mint roughly 4 billion unauthorized ONE tokens, worth about $3.2 million, and dumped most of them onto exchanges.

Lazarus compromised two of five operator multi-sig keys on Harmony's cross-chain bridge and drained $100M; the 2-of-5 quorum was below its risk profile.