Skip to main content
Sign in

Harmony ONE (August 2026 Layer-1 mint exploit)

avoid.net/harmony-one-august-2026-layer-1-mint-exploit→28/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

On August 12, 2026, an unidentified attacker exploited two consensus-layer vulnerabilities in the Harmony ONE mainnet to mint approximately 4 billion unauthorized ONE tokens, inflating the circulating supply by roughly 26%. Approximately 97% of the minted tokens reached cryptocurrency exchange deposit wallets before freezes could be enacted. Harmony deployed an emergency patch within roughly five hours, suspended its cross-chain bridge, and subsequently executed a full blockchain rollback to the pre-exploit state of August 11, 2026, erasing more than 109,000 legitimate transactions in the process. This incident is distinct from the June 2022 Horizon bridge hack.

Connected Entities

1 entities
Organizations
□Harmony ONE (August 2026 Layer-1 mint exploit)
Relationships
    Have evidence about Harmony ONE (August 2026 Layer-1 mint exploit)?

    Timeline(8 events)

    11 August 2026

    Attacker begins exploit activity on Shard 0 at approximately 23:25:40 UTC (block 92,730,036); first forged mint at block 92,731,152 (1 billion ONE, 00:02:59 UTC).

    Harmony Protocol official incident update (X post, August 13, 2026)

    12 August 2026

    Second mint of 3 billion ONE at block 92,732,898 (01:01:17 UTC). Approximately 2.8 billion ONE transferred at 01:02:31 UTC; nearly all moved by 01:05:24 UTC. ~97% of minted tokens reach exchange deposit addresses before any freeze.

    Harmony Protocol official incident update; Lookonchain on-chain analysis

    12 August 2026

    Independent analyst publicly flags the unauthorized minting anomaly before Harmony's official acknowledgment. ONE price drops 30–40% intraday to roughly $0.0008.

    CoinDesk; DeFiMon

    12 August 2026

    Emergency patch Mainnet v2026.1.1 (PR #5101) deployed at approximately 06:30 UTC, patching both the quorum verification flaw and the cross-shard receipt replay vulnerability. Bridge.harmony.one suspended. Shard 0 halted at block 92,753,555.

    Harmony Protocol official incident update (X post)

    13 August 2026

    Harmony publishes formal incident update on X, discloses four attacker wallet addresses, confirms coordination with exchanges and LayerZero for fund freezing.

    Harmony Protocol official incident update (X post)

    17 August 2026

    Harmony formally proposes a full blockchain rollback targeting Shard 0 block 92,730,034 and Shard 1 block 94,978,278 (both at 23:25:37 UTC, August 11). Rollback would erase approximately 109,126 regular and 315 staking transactions.

    DeFiMon; Cryptonomist

    18 August 2026

    Harmony confirms rollback execution. Validators receive new databases; network resumes from blocks #92,730,035 (Shard 0) and #94,978,279 (Shard 1).

    Forklog; Yahoo Finance

    20 August 2026

    Validators activate second stage of rollback procedure. Both shards reported stable for 24+ hours with near-full signing participation, advancing from epoch 3002 to 3004.

    CoinMarketCap AI — Latest Harmony News (August 2026)
    Provenance & Audit Trail

    Decision Log

    • #1publish⛓ pending8/30/2026, 12:14:01 PM
      hash: 65VoqtkbYQdRPCCjLcM4sRrDQZuHiMuWQ6g2QJZTve31

    0 of 13 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 8/30/2026, 12:13:51 PM

    last updated: 8/30/2026, 12:14:01 PM

    avoid.net — verified advice for a post-truth world