Harmony confirmed on Wednesday that its Layer 1 blockchain had been exploited after an attacker minted roughly 4 billion ONE tokens by leveraging empty blocks. The unauthorized mint sent ONE plunging about 34% in 24 hours to roughly $0.0008, putting the value of the attacker's take at approximately $3.2 million. On-chain analyst Juiceberg, whose post Harmony directly addressed, reported that about 97% of the minted tokens already sit on exchanges either sold or in deposit wallets ready to sell, with only ~115 million ONE (~2.9%) remaining on-chain.
Why it matters
This is Harmony's second major security incident. In June 2022, the Horizon cross-chain bridge was exploited for nearly $100 million, and the FBI attributed that earlier attack in January 2023 to North Korean state-backed groups Lazarus and APT 38. The pattern raises uncomfortable questions about recurring security posture at a project that has already been targeted by sophisticated nation-state adversaries. Harmony says it is working with its team and relevant exchanges to stop and freeze the funds, is developing a patch, and is evaluating rollback options, though the technical root cause has not yet been disclosed.
Market impact
The 4 billion ONE tokens represent a substantial dilution event relative to the project's existing circulating supply. Even at a token price near $0.0008, the unauthorized mint exceeds the typical daily turnover of a micro-cap Layer 1. The market reaction has been severe but contained so far, with a 34% drawdown in 24 hours on a low-liquidity asset. Watch whether Harmony commits to a hard fork rollback, which would restore the supply curve but further damage credibility, or absorbs the dilution and continues forward. Either path sets precedent for how the project handles a second breach.
Frequently asked questions
-
How much was stolen in the Harmony exploit?
The attacker minted approximately 4 billion ONE tokens, worth roughly $3.2 million at the time, with about 97% already on exchanges either sold or sitting in deposit wallets.
-
Did Harmony suffer an exploit before this one?
Yes, in June 2022 the Horizon cross-chain bridge was exploited for nearly $100 million, and the FBI attributed that earlier attack in January 2023 to North Korean state-backed groups Lazarus and APT 38.
-
What is Harmony doing about the exploit?
Harmony says it is working with exchanges to freeze the funds, developing a patch, and evaluating rollback options, though the technical root cause has not yet been disclosed.
-
How did the ONE token price react?
ONE fell about 34% in the 24 hours following the exploit and was trading near $0.0008, marking a severe but contained reaction on a low-liquidity micro-cap asset.
-
What is a rollback and would Harmony do it?
A rollback would revert the chain to before the unauthorized mint, restoring the supply curve but damaging credibility. Harmony has only said it is evaluating the option.
TheBlock