What happened
On August 12, 2026, Harmony confirmed an exploit in which an attacker minted roughly 4 billion ONE without authorization. Harmony paused its bridge, coordinated with exchanges to freeze funds, and prepared a patch while investigating the incident.
Harmony confirmed unauthorized ONE minting, but its initial public response did not disclose the underlying technical root cause. The mechanism should remain described as under investigation until a protocol post-mortem identifies it.
How it happened
Public reporting says the attacker used empty blocks to create unauthorized ONE and rapidly moved much of the new supply toward exchanges. Harmony acknowledged the incident and began containment; the precise minting sequence remains under investigation.
Protocol details
Evidence
- report @the_juice_berg incident report x.com
- report @coinminutes_en incident report x.com
- report @CertiKAlert incident report x.com
- report Harmony incident statement on X x.com
- analysis The Block: Harmony confirms unauthorized ONE minting exploit theblock.co
- analysis Decrypt: Harmony ONE token exploit decrypt.co
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
