Layer-1 exploit mints 4B extra tokens

TLDR

Harmony (ONE) suffered a major exploit where an attacker minted about 4 billion extra tokens, roughly a quarter of supply, causing a sharp price crash and emergency response.

1. An attacker abused Harmonys Layer-1 to mint roughly 4 billion unauthorized ONE, around 26% of total supply, mostly via empty block logic flaws.
2. Around 2.8 billion of those tokens were quickly sent to exchanges and largely sold, driving ONE to new all-time lows and wiping a big chunk of its market cap.
3. Harmony is freezing attacker wallets, patching the protocol, and even weighing a chain rollback, raising hard questions about security, decentralization, and user trust.

Deep Dive

1. What Happened Technically

Multiple reports say Harmonys Layer-1 was exploited so an attacker could mint about 4 billion ONE tokens without authorization, equal to roughly 26% of the networks supply, by abusing empty blocks and a broken supply-verification path. Harmony has publicly confirmed the incident and is working with exchanges after the unauthorized minting of 4 billion ONE tokens.

On-chain analysts highlight that Harmonys totalSupply endpoint initially failed to reflect this sudden inflation, masking the real circulating supply and complicating monitoring tools and dashboards. This was not a bridge theft, but direct creation of base-layer coins, which is especially damaging for a Proof-of-Stake chain that depends on predictable token economics.

2. Market Impact And Supply Shock

Analysts estimate around 2.8 billion of the newly minted ONE were rapidly funneled to exchanges, with only about 115 million left on-chain in attacker-controlled wallets, meaning roughly 97% of the exploit mint has already reached centralized venues. As that supply hit order books, ONE dropped more than 3040% intraday, setting fresh all-time lows and cutting market capitalization by several million dollars.

Because the token was already a small-cap asset with limited depth, this sudden extra 26% supply plus forced selling produced outsized price damage and a potential longer-term overhang for any tokens not yet sold. Even if technical fixes land quickly, holders now face diluted ownership and damaged sentiment.

3. Harmonys Response And Risks

Harmony has named multiple attacker-linked addresses, asked exchanges to freeze funds, and shipped an emergency patch to prevent further unauthorized minting, while openly considering a blockchain rollback as a way to neutralize the exploits economic impact. A rollback would revert the chain to a pre-attack state, but it also risks deleting legitimate user transactions that occurred in the same window.

This exploit follows prior major incidents on Harmony, including the Horizon bridge hack in 2022 and a staking-related mint bug in 2023, which collectively raise concerns about the robustness of its security processes and audits. For users and builders, the key uncertainties now are whether Harmony can fix the root cause without rollbacks and whether exchanges successfully contain remaining attacker funds.

Confidence: high because multiple independent news outlets and Harmonys own statements describe consistent details on the exploit and response.

Conclusion

A Layer-1 exploit that mints billions of new tokens is one of the most severe failures a chain can face, combining technical risk, tokenomics shock, and governance dilemmas around rollbacks. For Harmony, the episode compounds a history of high-profile security issues and forces the community to weigh immutability against economic repair, while current and prospective users should focus on whether the root vulnerability is transparently fixed, how much of the illicit supply is actually neutralized, and whether trust in the chain can realistically be rebuilt.