Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·PUGUcy…yYn9Summary
In August 2026, Harmony's Layer 1 blockchain suffered a critical unauthorized-minting exploit that began with roughly 4 billion forged ONE tokens (about 26% of supply) and, as investigation continued, was disclosed to involve trillions of forged tokens across multiple transactions, crashing the ONE price roughly 40%. Harmony responded with a full blockchain rollback of its two shards to a pre-attack checkpoint — an action critics say undermines blockchain immutability and highlights centralized control by the core team and validators. On September 6, 2026, Harmony proposed fully shutting down its Layer 1 network and migrating the ONE token to Ethereum as an ERC-20 asset, citing threats from "state actors and AI agents," with users told to exit all smart-contract positions before a September 10, 2026 snapshot deadline or risk permanent loss of assets not eligible for automatic migration.
Connected Entities
1 entitiesTimeline(8 events)
June 2022
Harmony's Horizon Bridge is hacked for approximately $100 million, later attributed by the FBI to North Korea's Lazarus Group and APT38 (covered separately on AVOID.NET under the existing harmony-protocol page; included here for background pattern only).
CoinDeskDecember 2023
A bug in Harmony's staking/undelegation logic improperly mints approximately 146.3 million ONE tokens across 74 addresses; Harmony issues an emergency patch and blacklists affected addresses.
DL News11 August 2026
Attacker begins exploiting a cross-shard receipt processing flaw to mint unauthorized ONE tokens; this timestamp later becomes the rollback checkpoint used by validators.
ForkLogAugust 2026
Harmony publicly confirms the exploit; initial reporting cites approximately 4 billion unauthorized ONE tokens minted (about 26% of supply); ONE price falls roughly 40%.
The Block17 August 2026
Harmony discloses the true scale of the exploit is far larger than first reported — approximately 3.01 trillion ONE forged across six transactions to four wallets — and announces plans for a full blockchain rollback rather than a token burn, blacklist, or migration.
The BlockAugust 2026
Validators execute the rollback of Shard 0 and Shard 1 to the pre-attack checkpoint, discarding an estimated 109,126 regular transactions and 315 staking transactions confirmed after the checkpoint.
The Block / CryptoRankSeptember 2026
Harmony announces a proposal to fully shut down its Layer 1 network and migrate the ONE token to Ethereum as an ERC-20 asset, citing threats from "state actors and AI agents."
The Block10 September 2026
Deadline for users to exit smart-contract positions; validators are permitted to begin ceasing node operations. Assets in multisig safes, liquidity pools, and on-chain applications cannot be migrated automatically.
The BlockDecision Log
- hash: HHSxuCaVBsQjHrFY64aVL9UASj6GjsEL4wZP9eA7TtM5
This investigation is cryptographically anchored to the Solana blockchain (1 event). 12 of 13 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/12/2026, 5:13:28 PM
last updated: 9/12/2026, 9:16:59 PM
avoid.net — verified advice for a post-truth world