Harmony is preparing to roll back its blockchain after attackers exploited a critical vulnerability to forge more than 3 trillion ONE tokens, creating one of the most extreme supply-manipulation incidents involving a major Layer 1 network.
The Harmony team said validators will revert both chains that make up its sharded network, Shard 0 and Shard 1, to a point immediately before the first confirmed fraudulent mint. Every block and transaction processed after that checkpoint will effectively be discarded.
The drastic response comes after investigators determined that the attack was significantly larger than initially believed and that the counterfeit ONE had already spread through wallets, decentralized exchanges, bridges and other services.
Hackers Created More Than 3 Trillion ONE Tokens
Harmony first confirmed the exploit on August 12 after discovering unauthorized ONE tokens being created on the network.
An independent security researcher initially identified approximately 4 billion ONE generated through empty blocks, but Harmony’s investigation later determined that activity represented only the beginning of the attack.
A reconstruction of the exploit found approximately 3.01 trillion ONE tokens were forged across six transactions and sent into four exploiter wallets.
The scale of the attack included several staggering figures:
Approximately 3.01 trillion counterfeit ONE tokens were created
The forged tokens were distributed across four exploiter wallets
One wallet successfully moved nearly 2.4 trillion ONE
Those tokens were worth almost $3 billion at pre-attack prices
The movement of nearly 2.4 trillion ONE occurred in under two minutes
The newly created tokens did not represent ONE transferred from another wallet. They were effectively created without the corresponding amount being removed elsewhere on the blockchain.
Cross-Shard Vulnerability Allowed ONE to Be Created From Nothing
The exploit originated from a vulnerability involving Harmony’s cross-shard receipt verification system.
Harmony operates using multiple shards that can communicate with one another. When assets move between shards, the network uses receipts to confirm that a transaction occurred.
The vulnerability allowed attackers to manipulate the verification process so that previously valid receipts could be processed multiple times.
In simple terms, the attacker could make an already-used transaction receipt appear valid again.
Each successful replay allowed the receiving shard to credit additional ONE without a corresponding debit occurring elsewhere, effectively allowing the attacker to manufacture new tokens.
Harmony patched the vulnerability on August 12, the same day the attack was discovered.
Harmony Chooses the Nuclear Option
After investigating several recovery strategies, Harmony concluded that rolling back the blockchain was the safest option.
The network considered several alternatives, including:
Burning the counterfeit ONE
Blacklisting wallets holding forged tokens
Migrating ONE holders to a new token
Selectively reversing transactions
Attempting to recover individual forged balances
Each approach presented significant problems because the counterfeit tokens had already moved throughout the Harmony ecosystem.
Some ONE had entered decentralized exchange liquidity pools, bridges, contracts, staking positions and centralized services.
That made simply burning the fraudulent tokens extremely difficult. Some forged ONE had already become mixed with legitimate user assets, meaning targeted recovery efforts could accidentally destroy or freeze funds belonging to innocent users.
Harmony ultimately concluded that a single fixed rollback point would apply the same rule to everyone while completely removing the fraudulent blockchain state.
Legitimate Transactions Will Also Be Erased
The biggest downside is that a blockchain rollback cannot distinguish between malicious and legitimate activity occurring after the selected checkpoint.
Harmony plans to restore Shard 0 and Shard 1 to their states immediately before the attack.
That means transactions occurring after the checkpoint will disappear from the restored blockchain even if they had nothing to do with the exploit.
The recovery checkpoints were subsequently identified as:
Shard 0 block 92,730,034
Shard 1 block 94,978,278
Both correspond to approximately 11:25 p.m. UTC on August 11
The rollback is expected to discard approximately 141,628 blocks and more than 109,000 transactions.
Users who transferred ONE, interacted with decentralized applications, traded tokens or performed other transactions after the checkpoint could therefore see those actions reversed when the restored network becomes authoritative.
Why Harmony Couldn’t Simply Burn the Fake ONE
Harmony says it has successfully traced nearly all of the counterfeit tokens to wallets or services.
Tracing the assets, however, does not necessarily mean they can safely be recovered.
Once counterfeit ONE entered a decentralized exchange, for example, another trader could unknowingly receive those tokens through a legitimate swap.
Blacklisting or burning that wallet’s ONE could then punish an innocent user rather than the original attacker.
Similar complications can occur when assets move through bridges, liquidity pools, staking contracts and centralized exchanges.
That contamination problem appears to have been one of the biggest factors behind Harmony’s decision to roll back the entire blockchain state instead of attempting to identify and remove individual balances.
Rollback Reopens the Blockchain Immutability Debate
Harmony’s decision raises a larger philosophical question that has followed blockchain technology for years.
Blockchains are designed around the idea that confirmed transactions should be extremely difficult, and ideally impossible, to alter retroactively.
A coordinated rollback challenges that principle.
However, allowing trillions of counterfeit ONE to remain inside the ecosystem could permanently damage the token’s supply, markets and network.
Harmony is essentially choosing between two fundamental blockchain principles — transaction finality and preservation of the legitimate token supply.
The situation is reminiscent of previous moments when blockchain communities were forced to decide whether reversing history was justified after catastrophic exploits.
The Scale of the Attack Made Normal Recovery Nearly Impossible
The enormous number of forged tokens makes this incident particularly unusual.
Harmony’s investigation found that one forged-mint wallet attempted hundreds of rapid transfers, successfully moving roughly 2.385 trillion ONE before the network could stop the activity.
That volume dramatically exceeded the legitimate circulating supply of ONE.
Because the counterfeit tokens moved so rapidly through the ecosystem, traditional responses such as freezing a small number of attacker wallets became increasingly difficult.
Harmony is coordinating with exchanges, bridges and law enforcement as it works through the recovery process.
Harmony Faces a Major Test of User Trust
Fixing the vulnerability is only one part of Harmony’s challenge.
The network must now convince users, developers, exchanges and validators that the restored blockchain can be trusted after such a significant security failure.
Users affected by the rollback could see legitimate transactions disappear, while exchanges and decentralized applications may need to reconcile their own internal records with the restored blockchain.
Validators will also need to coordinate around the replacement blockchain state for the rollback to succeed.
That makes communication and coordination across the Harmony ecosystem particularly important during the recovery.
Harmony’s Recovery Could Become a Major Blockchain Case Study
The Harmony exploit demonstrates how a relatively technical vulnerability can create an economic problem far larger than the value directly stolen by an attacker.
The hackers did not simply drain a bridge or steal assets from a smart contract. They compromised the mechanism responsible for determining whether new ONE should exist.
Once more than 3 trillion counterfeit tokens entered the blockchain and began moving through exchanges, bridges and liquidity pools, distinguishing legitimate economic activity from the attack became increasingly difficult.
Harmony now believes reverting the network to its last clean state is the least damaging solution.
But doing so means intentionally erasing valid blockchain history alongside the fraudulent transactions.
How Harmony executes the rollback, compensates or assists affected users and restores confidence in the network could ultimately become an important case study for how decentralized blockchain networks respond when an exploit compromises the integrity of the token supply itself.
