Harmony issues emergency patch to stop unauthorized minting after 4 billion ONE created
This digest was compiled by AI from multiple sources — links to the originals are below.
Harmony released an emergency validator patch on Aug. 12 to halt unauthorized minting of its ONE token, after a blockchain researcher estimated roughly 4 billion ONE had been created without permission. Even as the patch blocks further minting, the fate of the estimated 2.8 billion ONE that reached exchanges remains uncertain.
Emergency Patch v2026.1.1
Release v2026.1.1 corrects two receipt-validation flaws that had allowed unauthorized minting. One weakness let an empty signer record pass a quorum check because the verifier counted the full committee rather than actual validators. A second flaw enabled replay of a spent receipt by altering fields not bound to the block header. The patch binds the spent marker to authenticated header data and changes the quorum calculation. Harmony also paused its bridge during the response but did not specify if it was exploited.
Minting Scale and Exchange Impact
Onchain researcher Juiceberg estimated that about 4 billion ONE, or 26% of the supply figure used in the Harmony notice, had been minted without authorization. Juiceberg also estimated that 2.8 billion ONE reached exchanges. Harmony has not confirmed these figures, but it published four wallet addresses and asked exchanges to freeze traceable funds. The project declined to name the exchanges or disclose how much had been frozen.
What's Next
Harmony has said rollback options are under consideration but has not announced a decision. It remains unclear whether a rollback can be executed without disrupting legitimate transactions or how the market will react to the excess supply.
1 source
Harmony issues emergency patch to stop unauthorized minting after 4 billion ONE created
