# Attacker Mints About 4 Billion Harmony ONE Tokens, Sending the Token Down 26 Percent

Harmony says it is working with exchanges to freeze the proceeds and preparing a software fix, four years after a bridge compromise cost the network roughly $100 million.

- Published: 2026-08-12T05:36:54.490Z
- Canonical: https://polylog.news/crypto/2026-08-12/attacker-mints-about-4-billion-harmony-one-tokens-sending-th
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CoinDesk](https://www.coindesk.com/markets/2026/08/12/harmony-s-one-falls-26-after-attacker-allegedly-mints-4-billion-tokens), [Rekt News](https://www.rekt.news/), [CoinDesk (2022 archive)](https://www.coindesk.com/tech/2022/06/24/harmony-networks-horizon-bridge-exploited-for-100m)

An attacker created roughly 4 billion new ONE tokens on the Harmony blockchain, and the token [fell 26 percent](https://www.coindesk.com/markets/2026/08/12/harmony-s-one-falls-26-after-attacker-allegedly-mints-4-billion-tokens) as the new supply hit the market, CoinDesk reported early Wednesday. Harmony said during Asian morning hours that it is coordinating with exchanges to freeze the proceeds and is preparing a software fix.

Harmony has not published a root-cause analysis, and the mint remains an allegation rather than a confirmed reconstruction of events. What can be stated is the failure class. An unauthorized mint means the network's supply rule, the property that makes a token's issuance schedule credible, did not hold. Every other risk in a token, including custody and liquidity, depends on that assumption holding. Unauthorized-mint failures usually trace to one of two sources: a contract or module whose minting permission is reachable by an address that should not hold it, or a client-level accounting defect that lets the chain credit balances it never actually debited.

The network has been here before. In June 2022 an attacker drained about [$100 million from Harmony's Horizon bridge](https://www.coindesk.com/tech/2022/06/24/harmony-networks-horizon-bridge-exploited-for-100m) after compromising the multisignature keys that authorized withdrawals, a theft United States officials later attributed to operators linked to North Korea. Harmony's proposed remedy at the time, [minting up to 4.97 billion ONE](https://cointelegraph.com/news/backlash-as-harmony-proposes-minting-4-97b-tokens-to-reimburse-victims) to repay victims, was abandoned after community opposition. In December 2023 a separate defect [erroneously minted roughly 150 million ONE](https://www.web3isgoinggreat.com/?id=harmony-infinite-mint-bug), worth about $2.2 million, to 79 wallets.

Freezing is the immediate test. Exchanges can seize deposited tokens, so how much the attacker actually recovers depends on how fast the proceeds reached centralized venues rather than decentralized pools. Rekt News, which catalogues on-chain losses, continues to list open case files across smaller protocols, and Harmony's incident adds to an already elevated 2026 loss total.

## What this means

A supply breach hurts holders through dilution rather than through a drained treasury, so the loss is spread across everyone holding ONE instead of concentrated in one contract. Exchanges and market makers carry the secondary exposure, because they may have credited deposits of tokens that were never legitimately issued and now face clawback decisions. Two outcomes are live: exchanges freeze most of the proceeds and Harmony ships a patch that restores the accounting, or the tokens are already dispersed and holders absorb permanent dilution. Which outcome applies will be visible from how much of the mint sits at centralized venues.

## What to watch

- Whether Harmony publishes a technical post-mortem naming the specific mint path, since a client-level defect would implicate every node operator rather than one contract.
- How much of the 4 billion tokens exchanges actually freeze, which determines whether holders are diluted permanently or only briefly.
- Whether validators or the foundation propose a rollback or burn, a step that would settle how much unilateral control Harmony's operators hold over the ledger.