BlockBeats News, August 14th, Harmony Protocol released an event update stating that an unauthorized ONE token minting incident occurred on August 12th. Investigations revealed that the attacker exploited a cross-shard receipt duplication vulnerability, causing already processed cross-shard receipts to be re-executed, leading to the minting of additional ONE tokens out of thin air in empty blocks. The team is currently verifying two sets of impact data: early analysis indicates an initial minting of 4 billion ONE tokens, while the latest on-chain reconstruction shows that approximately 3.01 trillion ONE tokens were issued through 6 forged cross-shard transactions to 4 attacker wallets.

Harmony confirmed an initial minting of 4 billion ONE tokens, with 1 billion ONE and 3 billion ONE generated in two empty blocks through record-keeping. Subsequently, 2.8 billion ONE was transferred to other attacker addresses. The team has addressed the cross-shard receipt validation and pre-staked committee supermajority verification vulnerabilities and deployed Mainnet version v2026.1.1 at 06:30 UTC on August 12th. Bridge services have been paused, Harmony is currently coordinating with validators, exchanges, and LayerZero to freeze relevant funds and prepare to roll back the network to block 92,730,034 before the attack. Shard 0 is currently paused at block 92,753,555, and official RPC endpoints may return a 502 error as a result.