Alt layer-1 hack mints quarter of supply

TLDR

Harmony (ONE), an alt layer-1 blockchain, has confirmed an exploit where an attacker minted roughly 4 billion ONE, around a quarter of its supply, causing a severe price crash.

1. An on-chain vulnerability let an attacker mint about 4 billion ONE (around 26 percent of supply), with roughly 2.8 billion quickly sent to exchanges.
2. ONE fell around 30 to 40 percent to new all-time lows, deepening concerns about Harmonys security after earlier major exploits.
3. Harmony has shipped an emergency patch and is weighing a full chain rollback, leaving the fate of the extra tokens and recent user transactions uncertain.

Deep Dive

1. What Happened In The Exploit

Multiple reports say an attacker used a protocol flaw on Harmony (ONE) to mint about 4 billion new tokens, roughly 26 percent of the existing supply before the attack. On-chain analyst Juiceberg traced about 2.8 billion of these tokens being moved to exchanges, with only about 115 million left unsold on-chain. Harmony acknowledged the exploit and described it as unauthorized minting via faulty handling of empty blocks and receipt verification, then urged validators to install an emergency patch to stop further minting, and published suspect wallet addresses for exchanges to freeze.

Sources such as Decrypt and CryptoSlate detail that Harmonys team has not yet publicly confirmed the exact minted amount, but their statements and investigator estimates converge on the about 4 billion, around a quarter of supply figure.

2. Impact On ONE And Harmony

The sudden creation and dumping of such a large share of supply caused ONEs price to plunge around 30 to 40 percent intraday, hitting new all-time lows near fractions of a cent according to several market trackers. Market cap fell sharply as newly minted tokens were sold or parked on exchanges, amplifying dilution fears.

This exploit follows Harmonys 2022 Horizon bridge hack, where about 100 million dollars in assets were stolen, and a later staking bug that also created excess ONE. The pattern of repeated large-scale incidents is driving questions about Harmonys protocol audits, governance, and long-term viability as an alt L1.

3. What To Watch Next

Harmony has released validator patch v2026.1.1 to prevent further unauthorized minting and asked exchanges to freeze funds linked to four primary attacker wallets, while pausing bridge operations. The hardest unresolved questions are how much excess supply will ultimately be recognized, how much exchanges can actually lock, and whether Harmony will attempt a full blockchain rollback to erase the illicit tokens.

A rollback could also undo legitimate user transactions after the exploit, so community and validator sentiment around this option matters. Watching Harmonys official updates on the patch, rollback decision, and treatment of newly minted ONE will clarify whether the protocol can stabilize or faces deeper fragmentation.

Conclusion

An attacker minting about a quarter of Harmonys token supply is a protocol-level failure, not just a user- or bridge-side breach, and it has severely damaged ONEs economics and credibility. The eventual handling of the extra tokens and any rollback will shape whether Harmony remains a viable alt layer-1 or becomes a cautionary example of how deep consensus-layer bugs can permanently erode trust.