Harmony (ONE) unauthorized mint hack — August 2026
Incident facts
| Date of incident | |
|---|---|
| Publicly disclosed | August 12, 2026 |
| Target type | Blockchain or validator set |
| Loss | $3,200,000Published estimates range $2,200,000 to $4,800,000Price at time of incident |
| Method | Other or undisclosedAn attacker minted ONE outside the protocol's issuance rules; Harmony has not published a root cause, and the empty-block explanation in circulation comes from third-party analysts |
| Chains | Harmony |
| Outcome | Unresolved |
What happened
An attacker minted about 4 billion ONE on the Harmony blockchain on 12 August 2026, roughly a 26 per cent increase on the 15 billion already in circulation. Harmony confirmed the exploit the same day after the X account Juiceberg flagged it. The chain's totalSupply endpoint did not reflect the new tokens, so the inflation was not visible where most tooling looks for it, and about 2.8 billion of the minted supply reached centralised exchanges before the market priced it in. Roughly 115 million were still sitting on-chain unsold.
ONE fell between 26 and 40 per cent depending on the window measured, trading near $0.0008 afterwards. Harmony pushed an emergency update to stop further minting, paused its token bridge, asked exchanges to freeze four associated addresses, and said it was weighing a chain rollback.
The dollar figure here needs reading carefully. It is the value of the minted supply at the post-disclosure price, which is the figure the reporting settled on; it is not a confirmed record of what the attacker took out. Nobody has published the realised proceeds, and they are probably lower than the nominal figure, because the price fell as the tokens were sold into it. The range given spans the minted supply at the pre-exploit price at the top and the exchange-bound portion at the post-crash price at the bottom.
Harmony has not published a technical root cause. No attribution has been established.
Sources
- The BlockSecondary · retrieved 2026-08-13
- CoinDeskSecondary · retrieved 2026-08-13
- Tech TimesSecondary · retrieved 2026-08-13
- Bitcoin.com NewsSecondary · retrieved 2026-08-13
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "Harmony (ONE) unauthorized mint hack — August 2026", iTokenly, accessed 2026-08-13, https://itokenly.com/hacks/harmony-one-unauthorized-minthttps://itokenly.com/hacks/harmony-one-unauthorized-mintPermalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.