Oraichain — EVM Cross-Chain Unauthorized Minting Exploit (August 2026)
Summary
On August 9, 2026, Oraichain — an AI-focused Layer 1 blockchain — suffered a supply-integrity exploit in which a vulnerability in its EVM cross-chain transfer path enabled the unauthorized minting of ORAI tokens. The team halted the entire network at 04:00 UTC, restricted all bridges and cross-chain routes, and coordinated with centralized exchanges including MEXC to freeze fund movements. As of mid-August 2026, the exploit path had been addressed, the network had been restored, and the team was preparing to burn the unauthorized minted balances to reconcile canonical ORAI supply.
Connected Entities
1 entities · 10 linked investigationsTimeline(6 events)
2026-08-09
Vulnerability in Oraichain EVM cross-chain transfer path exploited, enabling unauthorized minting of ORAI tokens. Network halted at 04:00 UTC. Bridges, cross-chain routes, and public interfaces restricted.
Oraichain on X; CryptoRank2026-08-09
MEXC temporarily suspended ORAI deposits and withdrawals at the request of the Oraichain project team.
MEXC official announcement2026-08-10
Oraichain issued follow-up statement confirming exploit path had been identified and addressed, and announcing plans to burn unauthorized minted balances to restore canonical supply.
Oraichain on X; CryptoRank2026-08-11
Oraichain network reported to have come back online following patching and reconciliation efforts.
Oraichain on X2026-08-12
Harmony Protocol suffered a separate but structurally similar unauthorized minting exploit, with approximately 4 billion ONE tokens minted via a quorum verification flaw.
Decrypt; The Block2026-08-16
Crypto Times weekly security roundup reported the Oraichain incident alongside other exploits totaling more than $37 million in confirmed losses for the week of August 9–15, 2026. No formal Oraichain post-mortem had been published.
Crypto TimesDecision Log
- #1publish⛓ pending8/16/2026, 5:04:42 PMhash: A1AVNANtnYWzMLY9jmjmLruDiwgjwtzDxYaeJG9QTB8R
5 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/16/2026, 5:04:32 PM
last updated: 8/16/2026, 5:50:13 PM
avoid.net — verified advice for a post-truth world