Harmony weighs a full blockchain rollback after unauthorized minting floods exchanges with billions in ONE
Harmony released an emergency validator patch, v2026.1.1, to stop further unauthorized minting of its ONE token after confirming minting had occurred. The patch fixes two cross-shard receipt verification flaws: one let receipts pass quorum checks without the proper validator approvals, and another let already-spent receipts be replayed and credited again because some proof fields were not bound to authenticated block data. Harmony said it will later address tokens already minted, but has not disclosed how many exist or what their final treatment will be. An onchain researcher estimated about 4 billion ONE were minted without authorization and about 2.8 billion reached exchanges, though Harmony has not confirmed those figures. The project paused bridge.harmony.one, published four implicated wallet addresses, and asked exchanges to freeze traceable funds. Rollback options were mentioned but no rollback has been announced.
