Harmony Faces Major ONE Token Exploit as Billions of Unauthorized Tokens
Harmony is facing a major security crisis after an apparent exploit resulted in the unauthorized creation of billions of ONE tokens, triggering a sharp sell-off and raising urgent questions about the security of the network and the future supply of its native cryptocurrency.
On-chain data cited by crypto researcher Juiceberg indicates that approximately 4 billion ONE tokens were minted without authorization. The figure would represent roughly 26% of the token supply previously visible in the market, creating an extraordinary supply shock for existing holders.
The incident sent ONE sharply lower as traders reacted to the possibility that billions of newly created tokens could be sold into the market. Reports indicated that approximately 2.8 billion ONE had already been moved toward cryptocurrency exchanges, while a much smaller amount remained on-chain and potentially available for further transactions.
Harmony has acknowledged the incident and said it is coordinating with exchanges to stop and freeze funds associated with the affected wallets. The project is also working on a technical patch and evaluating a possible rollback of the blockchain.
The situation remains developing, and some of the figures circulating in the market come from on-chain researchers rather than a complete post-mortem from Harmony. That distinction is important as the project works to determine exactly how the exploit occurred and how much of the newly created supply can still be contained.
The Coin Bureau account on X has also highlighted the incident, bringing additional attention to the rapidly developing security event.
Harmony ONE Price Drops Sharply After Reported Exploit
The immediate market reaction was severe.
ONE fell by more than 30% as news of the unauthorized mint spread among traders. At one point, market data showed the token down by more than 38% over a 24-hour period, with trading activity increasing dramatically as investors rushed to reassess their exposure.
The sell-off illustrates how quickly cryptocurrency markets can react when the supply of a token suddenly becomes uncertain.
Unlike a conventional company, a blockchain's token supply is a fundamental part of its economic structure.
If billions of additional tokens can suddenly enter circulation, existing holders can face significant dilution.
That is precisely what has alarmed the market.
Before the incident, Harmony's publicly tracked supply was around 15 billion ONE. The alleged creation of approximately 4 billion additional tokens would therefore represent a substantial increase relative to the existing supply.
For investors, the central question is no longer simply whether the attacker can sell the tokens.
It is whether the network can prevent additional unauthorized issuance and determine what should happen to tokens that have already been created.
Billions of ONE Were Reportedly Sent Toward Exchanges
One of the most concerning aspects of the incident is the speed with which the newly minted tokens reportedly moved.
Juiceberg's on-chain analysis indicated that approximately 2.8 billion ONE had been transferred toward exchanges after the exploit.
That creates a significant potential source of selling pressure.
Tokens held in an attacker-controlled wallet do not necessarily affect the market immediately.
Tokens transferred to exchange-associated wallets, however, can potentially be sold or used for other transactions, depending on the exchange's response and whether the funds are frozen.
Harmony has said it is working with relevant exchanges to stop and freeze funds connected to the affected wallets.
The project has also published wallet addresses associated with the incident and asked exchanges to block funds that can be traced back to them.
That response could become one of the most important factors determining the eventual market impact.
If exchanges can identify and freeze the majority of the remaining tokens before they are sold, some of the potential selling pressure could be contained.
If significant amounts have already been sold, recovering the market impact becomes substantially more difficult.
Only a Fraction of the Reported Mint May Remain On-Chain
Juiceberg later reported that approximately 115 million ONE remained on-chain and potentially available for further selling.
If accurate, that would mean most of the alleged newly minted tokens had already been sold or were sitting in exchange wallets.
The distinction between tokens that have been sold and tokens sitting in exchange wallets is crucial.
An exchange deposit does not automatically mean that a token has been sold.
The assets may remain untouched, may be frozen by the platform or could potentially be transferred elsewhere.
That means the final amount of selling pressure cannot yet be determined with certainty.
The situation could change rapidly as exchanges respond to Harmony's requests and investigators continue tracing the transactions.
Harmony Confirms the Security Incident
Harmony has confirmed that an incident occurred and said its team is working to contain the damage.
The project's response includes coordination with exchanges, development of a patch and consideration of a possible blockchain rollback.
Harmony has also asked validators to upgrade to a patch intended to prevent additional unauthorized minting.
The project temporarily paused its bridge service while the incident was being investigated.
The measures indicate that Harmony is treating the event as a network-level security emergency rather than simply a market incident.
The immediate priority is to stop the vulnerability from being exploited again.
Only after that can developers fully address the newly created tokens and determine whether a rollback or another supply-management solution is appropriate.
What Is a Blockchain Rollback?
A rollback is one of the most consequential options available to a blockchain team.
In simple terms, a rollback can attempt to return the network to an earlier state before problematic transactions or blocks were recorded.
But such a decision is extremely complicated.
A rollback can affect legitimate transactions that occurred during the same period.
Users who bought, sold or transferred ONE normally could potentially see those transactions reversed if the network returns to an earlier point.
That creates a difficult trade-off.
Harmony must balance the desire to eliminate unauthorized activity against the need to preserve confidence in the blockchain's transaction history.
The project has described rollback as an option under consideration rather than a confirmed decision.
That means investors should not assume that a rollback will definitely occur.
The Supply Problem Is at the Center of the Crisis
The most important issue created by the exploit is supply integrity.
A cryptocurrency's monetary policy depends on the assumption that tokens cannot be created outside the rules established by the protocol.
If an attacker can bypass those rules, confidence in the token can deteriorate rapidly.
The reported 4 billion ONE mint is particularly significant because of its size relative to the existing supply.
A sudden increase of roughly 26% would be dramatically different from normal token emissions associated with staking rewards or scheduled network incentives.
It would instead represent an unexpected expansion of supply.
That is why investors reacted so aggressively.
The concern is not simply that one attacker possesses a large amount of ONE.
The deeper concern is that the mechanism responsible for controlling supply may have been compromised.
Harmony Has Faced a Major Security Incident Before
The latest event also arrives with Harmony's previous history of security problems still relevant to the project's reputation.
In June 2022, attackers stole approximately $100 million from Harmony's Horizon Bridge.
That incident became one of the most significant hacks in the history of cross-chain infrastructure.
Harmony subsequently developed reimbursement proposals for users affected by the Horizon incident, including proposals involving the minting of additional ONE tokens over an extended period. One proposal discussed minting approximately 4.97 billion ONE for a 100% reimbursement scenario.
The historical context makes the latest incident particularly sensitive.
Harmony has spent years attempting to rebuild confidence after the Horizon bridge attack.
Another major supply-related security incident creates an additional challenge for the network and its community.
However, the two incidents are technically different and should not automatically be treated as the same type of vulnerability.
The Horizon attack involved the cross-chain bridge.
The current incident concerns an alleged unauthorized mint of ONE on Harmony's network.
Why Unauthorized Minting Is So Dangerous
Token issuance is one of the most sensitive functions in any blockchain ecosystem.
If an attacker obtains the ability to create tokens, the attacker can potentially generate enormous amounts of value at almost no direct cost.
That creates a powerful incentive to sell the newly created assets as quickly as possible.
The resulting market impact can be severe.
An attacker who receives billions of newly minted tokens does not need to wait for the cryptocurrency to appreciate.
Even selling a fraction of the supply can potentially generate substantial proceeds while simultaneously pushing the token price lower.
For existing holders, the combination can be devastating.
The value of their holdings falls while the number of tokens in circulation rises.
This is why supply security is fundamental to the credibility of blockchain networks.
Exchange Cooperation Could Be Critical
Centralized exchanges may play a major role in containing the incident.
Once tokens associated with an exploit reach an exchange, the platform can potentially freeze the funds, flag the addresses and prevent withdrawals or sales.
That does not guarantee recovery.
Exchanges must first identify the affected assets and determine whether they can be connected to the exploit.
Blockchain transactions are public, but tracing funds across multiple wallets and platforms can become complicated.
Attackers can split funds across addresses, move them between chains or attempt to convert them into other assets.
For that reason, time is critical.
The faster exchanges receive reliable wallet information, the greater the possibility of preventing additional sales.
Harmony's decision to publish affected wallet addresses reflects the importance of that coordination.
 |
| Source: Xpost |
ONE Trading Volume Surges as Investors Rush to Exit
The market's reaction has also been reflected in trading volume.
Data cited following the incident showed ONE's 24-hour trading volume increasing by thousands of percent as the token sold off.
Such a spike is typical of a market experiencing a major information shock.
Some investors sell because they fear additional losses.
Others may attempt to trade the extreme volatility.
Market makers may also adjust liquidity because of the uncertainty surrounding the token's supply.
The result can be unusually wide price movements.
For ordinary holders, that environment can make it difficult to determine whether a price represents fair value or simply temporary panic.
The Official Supply Figure Has Also Become a Point of Concern
Another issue raised by on-chain researchers concerns how the newly created tokens were reflected in supply data.
Juiceberg alleged that Harmony's totalSupply endpoint did not immediately reflect the additional tokens.
If confirmed, that could make it more difficult for market participants to accurately determine the real circulating supply during the incident.
Accurate supply information is essential for cryptocurrency investors.
Market capitalization is generally calculated by multiplying the token price by the circulating supply.
If the supply figure is inaccurate, market-cap calculations can also become misleading.
That makes transparency a particularly important issue as Harmony investigates the incident.
The project will likely need to provide a detailed explanation of how the unauthorized tokens were created, why existing safeguards failed and how the final supply will be determined.
Validators Are Being Asked to Upgrade
Harmony has reportedly instructed validators to install a patch designed to prevent additional unauthorized minting.
Validators play an important role in maintaining the network and confirming its state.
A coordinated software upgrade can therefore be an important part of containing a protocol-level exploit.
The challenge is ensuring that validators upgrade correctly and that the fix does not introduce additional problems.
In a crisis, developers must move quickly without sacrificing the testing and verification normally required for a major network change.
That balancing act is especially important when a rollback is also being considered.
What Happens to the Newly Minted Tokens?
The fate of the 4 billion allegedly unauthorized ONE tokens remains one of the biggest unanswered questions.
There are several possible outcomes.
Harmony could attempt to invalidate the affected tokens through a rollback or protocol-level intervention.
The network could potentially identify specific transactions and remove or reverse them.
Alternatively, tokens that have already been sold may be impossible to recover in full, leaving the market to absorb the economic consequences.
The project's final decision could have long-term implications for confidence in ONE.
A successful rollback might remove much of the unauthorized supply but could raise questions about transaction finality.
Allowing the tokens to remain could preserve the existing blockchain history but create permanent dilution.
Either option carries significant consequences.
Investors Face Extraordinary Uncertainty
For holders of ONE, the current situation is difficult because several important variables remain unresolved.
The exact exploit mechanism has not yet been fully explained.
The final amount of unauthorized tokens may still be investigated.
The amount already sold remains uncertain.
Exchange freezes may prevent some funds from moving.
And Harmony has not confirmed whether a rollback will ultimately take place.
That means the market is trading under unusually high uncertainty.
Investors should be particularly careful with social-media claims during a rapidly developing exploit.
On-chain researchers can provide valuable information, but preliminary figures can change as investigators trace additional transactions.
The most reliable developments will come from Harmony, affected exchanges and independent blockchain-security investigators.
The Broader Lesson for Crypto Security
The Harmony incident is another reminder that blockchain technology does not eliminate security risks.
A decentralized network can still contain software vulnerabilities.
Validators can still be compromised.
Bridges can still fail.
Smart contracts can still contain errors.
And token issuance mechanisms can potentially be exploited.
The larger the financial value secured by a protocol, the greater the incentive for attackers to search for weaknesses.
This creates a constant arms race between blockchain developers and security researchers.
Projects must continually audit code, monitor unusual transactions and maintain emergency response procedures.
The ability to detect an exploit quickly can sometimes be just as important as preventing it.
Harmony's Reputation Faces Another Test
The immediate technical problem is the unauthorized mint.
The longer-term challenge is trust.
Cryptocurrency users must believe that the rules governing a token's supply can be relied upon.
If users begin to believe that billions of additional tokens can be created unexpectedly, they may reconsider whether they want to hold or use the asset.
For Harmony, that trust issue is especially important because the project has already spent years recovering from the 2022 Horizon bridge hack.
The latest incident therefore comes at a difficult time.
The project will need to demonstrate not only that it can stop the current exploit but also that it can explain what went wrong and prevent similar problems in the future.
What Investors Will Be Watching Next
Several developments are likely to dominate the next phase of the story.
First, investigators will want to identify the precise vulnerability that enabled the unauthorized mint.
Second, exchanges will determine how much of the affected supply can be frozen.
Third, Harmony will need to clarify the actual amount of ONE created.
Fourth, validators will need to complete the emergency upgrade.
And finally, the community will have to evaluate whether a rollback is appropriate.
Each step could affect the token's price and the broader perception of Harmony.
The market will also watch whether additional unauthorized tokens appear after the patch.
If the vulnerability is successfully closed, attention will shift toward recovery.
If new minting continues, the crisis could become significantly more severe.
A Crisis That Could Reshape Harmony
The reported 4 billion ONE exploit represents one of the most serious challenges Harmony has faced since the Horizon bridge attack.
The alleged unauthorized mint is enormous relative to the network's existing token supply, while the rapid movement of billions of ONE toward exchanges has created immediate selling pressure.
Harmony has confirmed the security incident and is working with exchanges to freeze affected funds. It is also preparing a patch and considering rollback options.
But many questions remain unanswered.
The final impact will depend on how much of the unauthorized supply can be contained, whether the network can successfully eliminate the vulnerability and what decision Harmony makes regarding the blockchain's history.
For now, ONE remains under intense pressure as traders attempt to price in the possibility of further selling and dilution.
The incident is also likely to reignite broader discussions about blockchain security, token supply controls and the risks associated with highly complex decentralized infrastructure.
For Harmony, the immediate priority is clear: stop the exploit, protect remaining funds and establish exactly what happened.
After that, the project faces an even larger task.
It must convince users and investors that the network can once again be trusted.
hoka.news – Not Just Crypto News. It’s Crypto Culture.
Writer @Victoria
Victoria Hale is a writer focused on blockchain and digital technology. She is known for her ability to simplify complex technological developments into content that is clear, easy to understand, and engaging to read.
Through her writing, Victoria covers the latest trends, innovations, and developments in the digital ecosystem, as well as their impact on the future of finance and technology. She also explores how new technologies are changing the way people interact in the digital world.
Her writing style is simple, informative, and focused on providing readers with a clear understanding of the rapidly evolving world of technology.
Check out other news and articles on Google News
Disclaimer:
The articles on HOKA.NEWS are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
HOKA.NEWS isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.