Harmony Protocol was attacked, 23.85 trillion ONE were illegally minted and the network was rolled back to August 11

The blockchain protocol Harmony Protocol announced a complete network rollback due to a security vulnerability incident. Shard 0 and Shard 1 will roll back to block heights 92,730,034 and 94,978,278, corresponding to the state on August 11 at 23:25:37 UTC. The attacker exploited vulnerabilities in cross-shard receipt validation and quorum validation to mint ONE. A single wallet initiated 534 fraudulent transfers of 5 billion ONE each within 106 seconds, of which 477 were successful, illegally minting and transferring 2.385 trillion ONE, causing the price of ONE to drop by over 30%.

Harmony has deployed emergency patch Mainnet v2026.1.1, suspended cross-chain bridge services, and requested exchanges to freeze related addresses. Over 99.9% of the counterfeit token flow has been tracked, and validators will regenerate blocks from the target block, permanently discarding 141,628 blocks during the rollback period, including 109,126 ordinary transactions and 315 staking transactions.