Harmony Probes Systemic Exploit After Unauthorized Minting of 4 Billion ONE Tokens

Layer-1 blockchain platform Harmony (ONE) is facing a severe crisis following an exploit that minted nearly 4 billion unauthorized ONE tokens, representing approximately 26% of the network's total supply. In response, developers are scrambling to freeze assets across major exchanges while actively evaluating a highly controversial blockchain rollback to mitigate the fallout.

Inflationary Breach via Empty Block Exploitation

According to on-chain data highlighted by community analyst "Juiceberg," the attacker exploited a vulnerability to mint tokens directly through empty blocks. The mechanics of the breach suggest a highly coordinated liquidation attempt:

■Roughly 2.8 billion tokens were immediately routed to centralized exchange deposit addresses, triggering massive downward price pressure.

■The attacker reportedly retains approximately 115 million ONE on-chain, representing just 2.9% of the total minted sum.

■The remaining billions of tokens are believed to have been either liquidated or distributed across various exchange hot wallets.

Market Capitulation and the Shadow of Past Hacks

While Harmony has not yet confirmed the exact technical vector or the precise volume of tokens sent to exchanges, the market reaction was swift and brutal:

■Data from CoinGecko shows the ONE token plunged 33.9% within a 24-hour window following the news.

■This incident reopens deep wounds for the ecosystem, which was still recovering from the June 2022 Horizon Bridge exploit that saw $100 million stolen by the North Korean state-sponsored Lazarus Group.

The ability to mint 26% of a blockchain's total supply through empty blocks points to a catastrophic failure in Harmony's consensus or minting logic. While a blockchain rollback is often viewed as an ideological failure that violates the core principle of immutability, it remains the only viable mathematical option to prevent the total economic collapse of the ONE token. From a DeFi perspective, this exploit highlights the extreme systemic risks inherent in legacy layer-1 architectures that fail to implement strict, automated supply-cap invariants at the smart contract execution layer.