Harmony Exploit Mints 4B ONE, Token Drops 40%

Harmony Says 4 Billion ONE Were Minted

Harmony runs a proof-of-stake blockchain whose ONE token is used for transaction fees, staking and governance. The project’s documentation describes its sharded network and validator model, but it does not explain the Aug. 12 exploit path.

The reported scale sets this event apart from a temporary service outage. CoinDesk said roughly 15 billion ONE existed before the incident, which would put an additional 4 billion at about 26.7% of that base. A change of that size can disrupt the token’s supply assumptions even before the network completes a technical investigation.

The best available impact measure is therefore two-part: the unauthorized issuance and the money that may have escaped containment. The Block reported the 4 billion ONE were worth about $3.2 million at a contemporaneous price near $0.0008. That valuation should not be treated as a final theft total, because a token minted without authorization can be rolled back, frozen, recovered, sold at different prices, or remain in a deposit wallet.

Harmony’s own notice named four addresses and asked exchanges to freeze funds connected to them. It did not publish a victim count, a confirmed amount frozen, a recovery figure, or a claim process. Readers should treat social posts declaring that all 4 billion ONE were permanently lost as unsupported until the project supplies that accounting.

The rapid price reaction also distinguishes market impact from the funds-flow question. A price fall affects holders broadly, whereas the direct incident accounting depends on how many minted tokens were sold, where they landed, and which can still be frozen or invalidated.

Most Minted ONE Had Reached Exchanges, Report Says

The Block attributed its distribution estimate to on-chain researcher Juiceberg, who said the attacker had about 115 million ONE left to sell on-chain, or roughly 2.9% of the approximately 4 billion minted. The report said about 97% was already on exchanges, sold, or sitting in exchange deposit wallets awaiting sale.

That estimate is the clearest public exploitation evidence found for this report, but it has limits. It is an analyst’s reading of addresses and transfers, not an audited statement by Harmony or a public confirmation by named exchanges. It also cannot establish how much was frozen after the transfers, how much was sold, or the attacker’s realized proceeds.

The project paused its bridge and said it was coordinating with “relevant exchanges.” Those actions can reduce further movement, but transfers made before an exchange intervention are harder to reverse than balances still visible on the native chain. This is the operational difference between an unauthorized mint and a loss that remains fully inside a protocol-controlled contract.

Harmony has faced a much larger but different security incident before. The FBI confirmed that North Korea-linked Lazarus Group actors were responsible for the June 2022 theft of $100 million from Harmony’s Horizon bridge. The new case concerns unauthorized ONE issuance, not a confirmed breach of the old bridge’s reserves, and there is no public attribution to Lazarus in the sources reviewed.

For comparison, a recent Taiko bridge exploit involved an estimated $1.7 million loss after faulty proof validation, while the current Harmony incident centers on supply creation and the race to stop tokens from reaching venues where they can be exchanged. Both cases show how an application or protocol failure can become a liquidity event before a post-mortem is ready.

The timing also extends a heavy year for user-facing crypto security failures. TRM Labs’ H1 tally counted 207 hacks in the first six months of 2026, a record in its dataset, even though its reported aggregate losses were below the prior year’s level. Harmony’s final accounting will show whether this event adds mainly a token-supply shock, realized exchange sales, or both.

ONE Price Drop Raises Rollback Stakes

A rollback would attempt to restore Harmony to a state before the unauthorized issuance and continue from that history. It could eliminate tokens that remain on Harmony, but it would also raise questions about ordinary transfers and smart-contract activity after the chosen point. Harmony has not said what rollback height, if any, it favors.

That uncertainty is meaningful for exchanges, wallets and users. A bridge pause and address blocks are reversible containment tools; a rollback changes the accepted chain history. Any completed plan will need to say how validators are expected to act, whether exchanges will support the resulting history, and how the team will reconcile funds that crossed out of Harmony before the response.

The broader market backdrop was also cautious. The Crypto Fear and Greed Index read 27, classified as Fear, on Aug. 12. It does not measure Harmony’s incident or predict a recovery, but sharp moves in thinly traded tokens can be amplified when confidence is already low.

The next verifiable milestones are Harmony’s root-cause report, the amount exchanges have frozen, an address-by-address recovery accounting, and a clear validator or governance decision on rollback. Until then, the established facts are a confirmed exploit, a reported 4 billion unauthorized ONE mint, a material token-price decline, and evidence that most of the reported mint may have reached exchange infrastructure before containment.