Harmony is preparing to roll back its network after an attacker forged 3 trillion ONE tokens. The fake supply spread through exchanges, bridges, and liquidity pools, and the team behind the blockchain said a targeted cleanup wasn't practical.
Why a rollback instead of a cleanup
The attack didn't just create a few bad coins. It inflated the total supply by trillions, dwarfing the legitimate ONE in circulation. The team initially considered trying to remove the forged tokens one by one, but that approach fell apart quickly. The tokens had already moved across the ecosystem, mixing with legitimate funds in ways that made it nearly impossible to tell them apart.
So they opted for a more drastic move: rewind the entire network to a state before the attack happened. That means transactions after a certain point would be undone, and the forged tokens would effectively disappear.
How the forged tokens spread
The fake ONE didn't stay in one place. They flowed into exchanges, got swapped on bridges, and ended up in liquidity pools. Each hop made the contamination worse. By the time the team realized the scale, the tokens were everywhere. Trying to surgically remove them would risk breaking legitimate transactions and might still leave some bad tokens behind.
That's why the rollback is seen as the only clean option. It wipes out everything that happened after the attack, including any trades or transfers made with the forged supply. The downside is that legitimate activity during that window gets rolled back too.
What the rollback means for users
For anyone who used Harmony during the affected period, the rollback could undo recent transactions. That's a tough trade-off, but the alternative — leaving 3 trillion extra tokens in circulation — would devalue everyone's holdings and undermine trust in the network.
The team hasn't announced a specific timeline for the rollback yet. They're still working out the details, including which block to rewind to and how to handle the exchanges and bridges that received the forged tokens. Until then, users are left waiting for instructions.
