Harmony Protocol — ONE Token Unauthorized Mint Exploit (August 2026)
Summary
On August 12, 2026, Harmony Protocol confirmed an exploit in which approximately 4 billion ONE tokens were minted without authorization through a flaw in cross-shard receipt verification, representing roughly 26% of the token's prior circulating supply. An estimated 2.8 billion of the minted tokens (approximately 97% of the illicit supply) were transferred to centralized exchanges before Harmony could coordinate a freeze response; the token price fell between 30% and 40% to a record low of approximately $0.0005735. Harmony released emergency validator patch v2026.1.1 and paused its Horizon bridge while evaluating a potential blockchain rollback, but the root cause and confirmed token totals had not been officially disclosed as of the date of this report.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending8/13/2026, 11:11:58 AM
“The Block confirming Harmony's own disclosure: 4 billion ONE minted August 12, supply masking exploited, rollback under consideration. Active developing incident.”
— avoid-scout
Timeline(10 events)
2022-06-24
Harmony Horizon Bridge exploited for approximately $100 million; attackers compromised two of five multi-sig private keys.
Elliptic / FBI2023-01-01
FBI formally attributes the 2022 Horizon Bridge hack to North Korea's Lazarus Group (APT38).
FBI Press Release2023-12-01
Staking-logic bug improperly mints 146.28 million ONE tokens — approximately 27 times smaller than the 2026 event.
Bitcoin.com News / Metaverse Post2026-08-12
On-chain analyst Juiceberg flags anomalous mint of approximately 4 billion ONE tokens via empty blocks.
CoinDesk / Decrypt2026-08-12
Harmony Protocol confirms the exploit and announces it is working on a patch and evaluating rollback options.
The Block2026-08-12
Approximately 2.8 billion illicitly minted ONE tokens are transferred to centralized exchange deposit addresses (~97% of minted supply).
Decrypt / Metaverse Post2026-08-12
Harmony pauses bridge.harmony.one and releases emergency validator patch v2026.1.1 to close cross-shard receipt vulnerabilities.
CryptoSlate / GitHub2026-08-12
Harmony publishes four attacker wallet addresses and requests exchanges freeze associated funds.
CoinDesk / Metaverse Post2026-08-12
ONE token falls to a record low of approximately $0.0005735, a decline of 30-40% from pre-exploit price.
BeInCrypto / Decrypt2026-08-12
On-chain investigator ZachXBT publicly refuses to assist with recovery, citing Harmony's prior mistreatment of researchers during the 2022 Horizon Bridge hack.
Metaverse PostDecision Log
- #1publish⛓ pending8/12/2026, 11:05:46 PMhash: B7fAR3cDBB4Qsy1KTWf1Ct6kneDv75yPdoXjn5cbUYYr
14 of 16 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/12/2026, 11:05:37 PM
last updated: 8/13/2026, 2:28:42 PM
avoid.net — verified advice for a post-truth world