#Harmony遭攻击疑增发约40亿枚ONE Harmony Suffered Another Severe Blow: On-chain Researcher Juiceberg Detected the Attackers Illegally Mint About 4 Billion ONE Tokens (26% of the Total) via Empty Blocks. Of these, around 2.8 Billion Have Been Transferred to Centralized Exchanges. The price of ONE has plunged nearly 38% over the past 24 hours, with the ONE/USDT pair crashing from $0.00118 to a low of $0.00056, and trading pairs such as ONE/ETH and ONE/BTC dropping in tandem 📉.
The Core Cause: Cross-Shard Receipt Verification Flaws
Unlike the 2022 Horizon cross-chain bridge private key leak, this incident stems from a mathematical defect at the protocol level. In its v2026.1.1 patch, Harmony revealed two vulnerabilities: first, empty-signature records combined with a "mathematically neutral" aggregated signature can bypass the committee quorum check, causing validators to count votes as if for the full committee rather than the actual signers; second, the "spent" flag of receipts is not bound to the signed block header data. By tampering with the proof fields, the same receipt can be recorded repeatedly, allowing the target shard to receive funds again without the corresponding deductions. The attackers exploited these two pathways to mint tokens out of thin air. The official team has urgently paused the bridge at bridge.harmony.one, published four implicated wallet addresses (including one1uap8dx2z0qsjxqthm5flgcxkeepsz3gsrghnfn, etc.), requested exchanges to freeze funds, and is assessing a full on-chain rollback.
Short Term: Bearish 📉. About 97% of the newly minted coins are already on exchanges. Selling pressure has not yet cleared, and in addition, ZachXBT has refused to assist with tracking—so the effectiveness of any freezes remains questionable. If a rollback or large-scale freeze is implemented, a medium-term or even technical rebound is possible 📈.
However, in the long run it remains bearish 📉. This is Harmony’s third supply-related security incident within three years (the 2022 Horizon bridge suffered a $100 million theft, and in 2023 a staking vulnerability led to the mistaken release of 146 million ONE). Protocol audits and core infrastructure controls have repeatedly failed. ONE has fallen nearly 97% from its historical high of $0.379, and rebuilding trust will be extremely difficult.
$ONE
$BTC
$ETH
The Core Cause: Cross-Shard Receipt Verification Flaws
Unlike the 2022 Horizon cross-chain bridge private key leak, this incident stems from a mathematical defect at the protocol level. In its v2026.1.1 patch, Harmony revealed two vulnerabilities: first, empty-signature records combined with a "mathematically neutral" aggregated signature can bypass the committee quorum check, causing validators to count votes as if for the full committee rather than the actual signers; second, the "spent" flag of receipts is not bound to the signed block header data. By tampering with the proof fields, the same receipt can be recorded repeatedly, allowing the target shard to receive funds again without the corresponding deductions. The attackers exploited these two pathways to mint tokens out of thin air. The official team has urgently paused the bridge at bridge.harmony.one, published four implicated wallet addresses (including one1uap8dx2z0qsjxqthm5flgcxkeepsz3gsrghnfn, etc.), requested exchanges to freeze funds, and is assessing a full on-chain rollback.
Short Term: Bearish 📉. About 97% of the newly minted coins are already on exchanges. Selling pressure has not yet cleared, and in addition, ZachXBT has refused to assist with tracking—so the effectiveness of any freezes remains questionable. If a rollback or large-scale freeze is implemented, a medium-term or even technical rebound is possible 📈.
However, in the long run it remains bearish 📉. This is Harmony’s third supply-related security incident within three years (the 2022 Horizon bridge suffered a $100 million theft, and in 2023 a staking vulnerability led to the mistaken release of 146 million ONE). Protocol audits and core infrastructure controls have repeatedly failed. ONE has fallen nearly 97% from its historical high of $0.379, and rebuilding trust will be extremely difficult.
$ONE
$BTC
$ETH