Skip to main content
AVOID.NET

Harmony ONE (August 2026 Layer-1 mint exploit)

avoid.net/harmony-one-august-2026-layer-1-mint-exploit→16/100·78% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·4zeYES…dQoV
last updated 2026-09-02

Summary

On August 12, 2026, an unidentified attacker exploited two consensus-layer vulnerabilities in the Harmony ONE mainnet to mint approximately 4 billion unauthorized ONE tokens, inflating the circulating supply by roughly 26%. Approximately 97% of the minted tokens reached cryptocurrency exchange deposit wallets before freezes could be enacted. Harmony deployed an emergency patch within roughly five hours, suspended its cross-chain bridge, and subsequently executed a full blockchain rollback to the pre-exploit state of August 11, 2026, erasing more than 109,000 legitimate transactions in the process. This incident is distinct from the June 2022 Horizon bridge hack.

Connected Entities

4 entities · 58 linked investigations
Organizations
□Harmony ONE (August 2026 Layer-1 mint exploit)□Harmony Bridge56
Protocols
⌂Harmony ONE (Protocol Entity)32⌂LayerZero — DVN Single-Verifier Configuration Risk
Relationships
  • Harmony Bridge→mentioned with→LayerZero — DVN Single-Verifier Configuration Risk(70%)
  • Harmony ONE (Protocol Entity)→mentioned with→Harmony ONE (August 2026 Layer-1 mint exploit)(80%)
  • Harmony ONE (August 2026 Layer-1 mint exploit)→mentioned with→LayerZero — DVN Single-Verifier Configuration Risk(80%)
  • Harmony ONE (August 2026 Layer-1 mint exploit)→mentioned with→Harmony Bridge(70%)
  • Harmony ONE (Protocol Entity)→mentioned with→Harmony Bridge(80%)
  • Harmony ONE (August 2026 Layer-1 mint exploit)→mentioned with→Harmony ONE (Protocol Entity)(85%)

Connected Through

4 shared actors · 74 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Harmony ONE (August 2026 Layer-1 mint exploit)?

Timeline(8 events)

11 August 2026

Attacker begins exploit activity on Shard 0 at approximately 23:25:40 UTC (block 92,730,036); first forged mint at block 92,731,152 (1 billion ONE, 00:02:59 UTC).

Harmony Protocol official incident update (X post, August 13, 2026)

12 August 2026

Second mint of 3 billion ONE at block 92,732,898 (01:01:17 UTC). Approximately 2.8 billion ONE transferred at 01:02:31 UTC; nearly all moved by 01:05:24 UTC. ~97% of minted tokens reach exchange deposit addresses before any freeze.

Harmony Protocol official incident update; Lookonchain on-chain analysis

12 August 2026

Independent analyst publicly flags the unauthorized minting anomaly before Harmony's official acknowledgment. ONE price drops 30–40% intraday to roughly $0.0008.

CoinDesk; DeFiMon

12 August 2026

Emergency patch Mainnet v2026.1.1 (PR #5101) deployed at approximately 06:30 UTC, patching both the quorum verification flaw and the cross-shard receipt replay vulnerability. Bridge.harmony.one suspended. Shard 0 halted at block 92,753,555.

Harmony Protocol official incident update (X post)

13 August 2026

Harmony publishes formal incident update on X, discloses four attacker wallet addresses, confirms coordination with exchanges and LayerZero for fund freezing.

Harmony Protocol official incident update (X post)

17 August 2026

Harmony formally proposes a full blockchain rollback targeting Shard 0 block 92,730,034 and Shard 1 block 94,978,278 (both at 23:25:37 UTC, August 11). Rollback would erase approximately 109,126 regular and 315 staking transactions.

DeFiMon; Cryptonomist

18 August 2026

Harmony confirms rollback execution. Validators receive new databases; network resumes from blocks #92,730,035 (Shard 0) and #94,978,279 (Shard 1).

Forklog; Yahoo Finance

20 August 2026

Validators activate second stage of rollback procedure. Both shards reported stable for 24+ hours with near-full signing participation, advancing from epoch 3002 to 3004.

CoinMarketCap AI — Latest Harmony News (August 2026)
Provenance & Audit Trail

Decision Log

  • #4reviewRecorded on Solana ✓9/9/2026, 3:04:55 AM
    slot 445504728 · hash 6w64TUZPftw5VEH9YZ7Y5WknaBjRcucAdSQ7M68NbnZY
  • #3review revise-12Recorded on Solana ✓9/2/2026, 12:43:07 AM
    slot 443562471 · hash 4vvwQuwpZYzwQkbuHY65MefiTVhYjxNr6WMBp2jUN5Ry
  • #2reviewRecorded on Solana ✓9/2/2026, 12:43:07 AM
    slot 443562467 · hash 8T3FwDkZ2rJNrnjyyX1soEpZNVBDL2k552qGLNrrqDve
  • #1publishRecorded on Solana ✓8/30/2026, 12:14:01 PM
    slot 443527090 · hash 65VoqtkbYQdRPCCjLcM4sRrDQZuHiMuWQ6g2QJZTve31

This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 12 of 13 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0625 claims checked3 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 8/30/2026, 12:13:51 PM

last updated: 9/2/2026, 12:43:08 AM

5 views

avoid.net — verified advice for a post-truth world