On August 12, 2026, the Harmony blockchain confirmed a major exploit that enabled the unauthorized minting of approximately 4 billion ONE tokens — roughly 26% of the protocol’s existing total supply. The incident triggered an immediate shockwave across spot markets, sending the token into a sharp sell-off and reigniting concerns about the operational resilience of layer-1 networks.
🔑 Key takeaways
- ~4 billion ONE tokens minted without authorization, representing about 26% of the initial ~15 billion supply.
- Mechanism: use of empty blocks combined with a totalSupply endpoint that masked real-time inflation.
- ~2.8 billion ONE already routed to centralized exchanges, ~115 million remained on-chain (≈2.9%).
- ONE price: -34% in 24h, volume +4,031%, Vol/Mkt Cap ratio at 378.02%.
- Four wallets identified, the bridge.harmony.one bridge suspended, patch released on GitHub.
Exploit mechanism: a hidden inflation
The attack relied on a particularly insidious technique, combining the issuance of empty blocks with obfuscation at the supply-reading endpoint. According to on-chain data analyzed by researcher Juiceberg, the exploiter managed to insert mint transactions inside structurally empty blocks, thus bypassing the typical detection mechanisms that scan visible transactions in each block.
Even more concerning, the network’s totalSupply endpoint — the software interface returning the total number of tokens in circulation — did not reflect real inflation during the attack window. As a result, the publicly announced supply remained at 15.01 billion ONE, temporarily masking the pathological expansion of the money supply.
Once the exploit triggered, approximately 2.8 billion ONE were transferred to several centralized exchanges (CEXs) within a few hours, while ~115 million ONE remained on-chain (≈2.9% of the minted total). At the time of public reports, around 97% of the exploited funds had already reached trading platforms, mixing already-sold lots and balances parked in exchange deposit wallets.
Official response and emergency measures
Harmony confirmed the incident on August 12, 2026, and published four wallet addresses involved, asking partner exchanges to freeze and blacklist funds originating from these addresses:
one1uap8dx2z0qsjxqthm5flgcxkeepsz3gsrghnfn0xe7427699427821230177dd13f460d6ce43014510one17u300a40ll5wphd8kj5hktryhdjq3ml9fphy40xf722f7f6afffe8e0dda7b4a97b2c64bb6408efe5
« We are working on a fix and rollback options. »
Harmony team, official statement, August 12, 2026
The team suspended the bridge.harmony.one bridge and asked all validators to upgrade their nodes to a patch available on GitHub. The patch aims to prevent any additional issuance and restore consensus integrity.
Price impact: panic selling and market dislocation
The market reaction was immediate and severe. According to CoinMarketCap data relayed by The Block, ONE was trading at $0.0008114 at the time of publication, down 34% over 24 hours. Market capitalization plunged to $12.18 million, also down 34%, while trading volume surged to $46.69 million — a staggering +4,031% in a single session. The Volume/Market Cap ratio reached 378.02%, a textbook signature of capitulation and forced liquidations.
| Indicator | Value | 24h change |
|---|---|---|
| ONE price (USD) | 0.0008114 | -34% |
| Market cap | $12.18M | -34% |
| 24h volume | $46.69M | +4,031% |
| Vol/Mkt Cap ratio | 378.02% | — |
| Circulating supply | 15.01B ONE | unchanged |
| Max supply | none (uncapped) | — |
Other outlets report different magnitudes of decline — CoinDesk mentions a drop of about 40% during the Asian session, Blockfence cites -26%, and TradingView references a decline of more than 30%. This dispersion reflects liquidity fragmentation and the chaotic nature of the order book during the event.
A heavy track record: Horizon Bridge (2022) and the staking bug (2023)
The August 12 exploit is not an isolated incident for Harmony. The network carries two major incidents from recent years, raising questions about the robustness of its technical architecture.
In June 2022, Harmony suffered one of the largest bridge hacks in the crypto space: approximately $100 million was stolen from the Horizon Bridge after attackers compromised the private keys controlling the bridge. The FBI later attributed the theft to the Lazarus Group, a cybercriminal unit linked to North Korea. Harmony offered a $10 million bounty for information leading to the recovery of the funds — a fraction of which has been retrieved to date.
More recently, in December 2023, a bug in the staking system led to the unauthorized creation of about 146.3 million ONE, when validators that had reached the end of their eligibility period continued to receive rewards. Harmony identified 74 affected addresses — one of which had accumulated 51.2 million ONE — and executed an emergency upgrade coupled with a blacklist operation.
Taken together, these incidents outline a recurring risk profile for Harmony: software failures on critical components (mint, staking, bridge), exposure of centralized infrastructure (validator private keys), and dependence on CEX cooperation to mitigate illicit fund outflows.
Response options: rollback, patch and coordination
Faced with the magnitude of the issuance, the Harmony team is exploring several technical avenues. A rollback (rewinding the chain state) would erase all transactions after the exploit and restore the initial supply. However, this option hits a major obstacle: funds sent to centralized exchanges are no longer part of the Harmony blockchain. Once inside a CEX order book, their fate escapes on-chain consensus.
Additionally, Harmony must publish a patch specifically addressing the ~4 billion tokens already minted, either via a destruction mechanism (burn) or via a validator-side blacklist freeze. At this stage, the team has not yet publicly communicated the technical root cause of the exploit, nor confirmed the exact amount of unauthorized issuance.
The immediate operational priority remains coordination with the main CEXs to freeze the four identified wallets and prevent the unsold remainder (~115 million ONE) from reaching the markets. This cooperation, however, remains uncertain: each platform applies its own KYC/AML (Know Your Customer / Anti-Money Laundering) procedures and may unilaterally decide to block — or not — the funds based on its jurisdiction and internal policies.
Conclusion: an existential test for Harmony
The August 12, 2026 exploit constitutes an existential test for Harmony, which must demonstrate its ability to simultaneously coordinate a technical patch, potential legal action, and transparent communication with its community of validators and holders. If the team manages to freeze on-chain funds and publish a patch covering all illicitly minted tokens, the network could recover part of its credibility; if not, the risk of a structural loss of confidence — and liquidity — appears high.
For sector observers, the episode recalls an often-forgotten reality: the absence of a maximum supply cap on many layer-1 blockchains is not only an economic parameter — it is also an attack surface. As long as minting mechanisms are not formally verified and continuously audited, « hidden inflation » exploits will remain a structural threat to the entire ecosystem.
Sources
- The Block — Harmony confirms exploit involving unauthorized minting of 4 billion ONE tokens
- CoinDesk — Harmony’s ONE Falls 26% After Attacker Allegedly Mints 4 Billion Tokens
- Blockfence — Harmony confirms exploit after 4 billion ONE tokens reportedly minted
- TradingView — Harmony Protocol Hack: 4 Billion ONE Tokens Minted, Price Crashes 30%+
- EclecticIQ — Harmony Blockchain Confirms Compromise and Theft of ~$100M (Horizon Bridge, 2022)
This article is published for informational and educational purposes only. It does not constitute investment advice. Do your own research (DYOR) before making any decision.
