Harmony is rolling back its entire blockchain to erase roughly 4 billion forged ONE tokens, resetting the network to its state from August 11, 23:25 UTC — the last block before an attacker started minting fresh supply. Validators are loading clean replacement databases for both shards, and the chain stays paused until that work is done.
The exploit
The forged mint began just two blocks after the checkpoint Harmony picked as its cut-off point. That single attack swelled ONE's total supply by about 26%, and the token has since slid to a record low. ONE trades near $0.00072, down 4% over the past 24 hours, with a market cap of roughly $10.6 million — outside the top 1,000 coins by capitalization.
It's the kind of event that makes holders question the basic integrity of the ledger. A 26% supply inflation in a single block doesn't happen by accident.
Why a full rollback
Harmony's team says it weighed narrower fixes before settling on the reset. Burning fake tokens wallet by wallet would have been slow and uneven, and blacklisting addresses came with its own complications. A single cut-off point applies the same rule to everyone, which is the argument that won out. An outside security firm reviewed the incident and backed the team's findings.
The choice reflects a blunt reality: once an attacker has minted tokens into shared pools and bridges, there's no clean way to remove them surgically. Rewinding the whole chain was the option that treated every user the same.
What gets deleted
A rollback doesn't discriminate. Legitimate trades, swaps, and staking actions made during the affected window get wiped out right along with the forged supply. Harmony says it's coordinating with exchanges and bridges to mitigate the impact, but that coordination can't restore every user's exact position.
For anyone who traded ONE between the checkpoint and the pause, those transactions simply never happened. Positions revert to where they stood at 23:25 UTC on August 11.
Tracing isn't recovery
Investigators say they've traced nearly all of the forged ONE across wallets, pools, and bridges. But tracing doesn't put money back. Burning tokens that sit in shared liquidity pools could drain funds from unrelated users, which is exactly the kind of collateral damage the rollback is designed to avoid.
The incident lands in a rough stretch for crypto security. Taiko's bridge was exploited in June, and a cluster of breaches followed in July. Harmony's response is the more drastic one — a full network reset rather than a targeted patch — and the trade-offs are visible to anyone who used the chain in the past week.
The chain stays paused until validators finish loading the clean databases. When it comes back, the ledger resumes at August 11, 23:25 UTC. Everything after that simply didn't happen.
