Harmony’s ONE plunges 26% after exploit mints ~4B tokens; patch/rollback discussed
Harmony’s ONE token fell about 26% in Asian trading after an apparent exploit minted roughly 4 billion new ONE, lifting circulating supply by more than a quarter. Harmony confirmed the incident and said it is working with exchanges to freeze funds. The team also indicated it is preparing a software fix and “rollback options.”
A rollback would mean reverting the chain to a pre-exploit state, potentially removing post-exploit transactions. Traders should note the trade-off: while rollback can reduce the attacker’s ability to keep newly created ONE, it can also undo legitimate activity, and it can become harder once funds move to exchanges or other systems.
The reported damage is creation of ONE on Harmony itself, not a bridge theft. The incident follows prior Harmony security problems, including:
- Dec 2023: a staking bug that minted about 146.3 million ONE; some funds later moved to an exchange.
- 2022: the $100 million Horizon bridge hack attributed by the FBI to Lazarus.
Harmony has not yet detailed the vulnerability, how the ~4 billion figure was calculated, or how far back a rollback might go. The situation remains developing and could drive heightened volatility in ONE and broader DeFi sentiment.
Bearish
This is bearish for ONE in the immediate term because the market is reacting to a supply-increasing exploit (about +4B ONE, >25% of the prior supply). When traders believe token supply has been artificially expanded, they typically price in dilution risk and demand compensation, leading to sharp downside and wider spreads.
The potential rollback introduces additional uncertainty. Historically, when networks debate rollback versus immutability, markets often overreact first and then partially stabilize after clearer technical details. But even after fixes, the trust discount can linger because governance and security credibility are questioned.
Comparable past episodes include situations where invalid states required chain changes (or where emissions/accounting bugs surfaced). In those cases, the first wave is usually sell pressure on the affected asset, followed by a period of volatility as: (1) exchanges freeze/limit liquidity, (2) developers publish root-cause and remediation steps, and (3) traders reassess whether prior holders were effectively diluted or can be restored.
In the long run, if Harmony executes a credible patch and a well-communicated rollback (or another mechanism that removes or neutralizes the maliciously created ONE), the downside could slow and sentiment may recover. If the mechanism is unclear or partial, the market is likely to keep treating ONE as a higher-risk asset relative to peers.