An attacker minted about four billion ONE tokens on Harmony this week, roughly 26% of everything the chain had ever issued. That much fresh supply landing at once looks like the headline number. The number that actually matters is smaller. At ONE's price near $0.0008, the entire mint is worth about $3.2 million.
Harmony ONE changed hands above $0.37 in October 2021. It sits near $0.0008 now, down more than 99% from that peak, and the whole network carries a market value around $11.7 million. So an event that inflated the supply by a quarter did real damage to holders and almost nothing to a thief's balance sheet. The token slid somewhere between 26% and 34% once the mint surfaced, depending on which tracker you read.
Almost all the fake tokens were already gone
The minting was the easy step. Getting the coins out was the point, and it worked. On-chain watchers, first alerted by the account Juiceberg, traced roughly 2.8 billion of the minted ONE moving into exchanges and deposit wallets, about 97% of the batch. Only around 115 million tokens stayed onchain where they could still be frozen. By the time Harmony confirmed the exploit, most of the recovery window had already shut.
Harmony says it is coordinating with exchanges to freeze funds and is "developing a patch and evaluating rollback options." A rollback would rewrite recent blocks to erase the mint, the same heavy move two mining pools just made on Ravencoin's chain. It only helps for coins that have not already left the building.
Harmony has broken this way before
None of this is new territory for the network. Three separate failures, one recurring theme.
| Event | Date | What broke | Size | Where it went |
|---|---|---|---|---|
| Horizon bridge hack | June 2022 | Compromised private keys | About $100 million | FBI tied it to North Korea's Lazarus Group |
| Staking bug | December 2023 | Improper minting | 146.3 million ONE across 74 addresses | About 16.4 million reached an exchange |
| Supply mint | August 2026 | Unauthorized minting | About 4 billion ONE, near $3.2 million | About 2.8 billion, near 97%, to exchanges |
The failure mode is the same across all three: supply integrity rather than price. Mint exploits usually hit a wall at the exit, the way the WeMix attacker minted 5.2 million tokens but could only move 724,000 out. Harmony's attacker did not hit that wall. Set it beside the Hyperbridge exploit, which minted a billion bridged tokens and netted $237,000, and a pattern shows up. The token counts are enormous. The dollar hauls are not, because the chains being drained have so little value left to take.
Root cause is not public yet. Harmony's investigation is ongoing, and the team says it has traced more than 10,000 transfers tied to the fraudulent tokens. What happens to the $3.2 million depends on two open questions: whether a rollback actually lands, and whether exchanges freeze anything real out of the 115 million still sitting onchain.
