News linked to both this project and an event.
Harmony released an incident update stating that on August 12, 2026, Beijing time, an unauthorized issuance event of the native token ONE occurred on the Harmony mainnet. Officials confirmed that the initial abnormal issuance volume was 4 billion ONE, completed through two empty block entries; additionally, on-chain reconstruction results show that the total forged cross-shard issuance volume could reach 3.0100001 trillion ONE, involving 6 forged cross-shard transactions and 4 attacker wallets, and the team is still further verifying the two sets of data.
Odaily News: According to Harmony's monitoring, Harmony stated that it is advancing a rollback plan and has reached an agreement with validators and exchanges on the specific approach. The minting vulnerability fix has been activated, and the full list of attacker wallets will be released soon. Previously, the number of ONE tokens anomalously minted on the Harmony network exceeded 3 trillion, involving 6 abnormal blocks.
Harmony 官方 X 账号发文，Harmony 公链近期遭遇黑客攻击，攻击者通过漏洞恶意铸造代币并分散转移至 409 个钱包，涉及转账笔数达 10,288 笔。Harmony 团队已就数百笔可疑存款交易向交易所合作伙伴发出警报，相关交易所迅速冻结了黑客钱包。事件发生约 4 小时内，紧急补丁已发布，目前 53% 的验证节点已完成升级。团队表示，链回滚是目前最受认可的修复方案，将于数小时内公布进一步处置计划。
According to official sources, Harmony announced that it has suspended cross-chain bridge services due to a security incident. Earlier reports indicated that Harmony was attacked, and the attacker exploited an empty block vulnerability to mint approximately 4 billion ONE without authorization, accounting for approximately 26% of the current supply.
Odaily Odaily PaperImperium, the head of MegaETH, disclosed on X platform that documents from the U.S. District Court for the Southern District of New York show that a U.S. court has issued an injunction against the Arbitrum DAO, prohibiting it from transferring approximately $71 million in ETH assets that were previously frozen during the KelpDAO hacking incident. In response, on-chain detective ZachXBT posted on X platform, stating that certain U.S. law firms are using his investigative work and on-chain forensics to help victims of some hacking incidents file legal claims. However, this practice may actually slow down or hinder victims from receiving compensation or recovering funds.ZachXBT added that in previous hacking incidents involving the Lazarus Group, such law firms often stepped in after on-chain fund tracking or freezing was completed, proposing subsequent legal actions that were weakly related to the crypto incidents themselves. Similar "free-riding claims" strategies were used in events like Harmony and Bybit. He called on the crypto community to establish a DAO to resist such practices.
According to threat intelligence released by the SlowMist security team (@SlowMist_Team), its threat intelligence system MistEye has received community reports identifying an active social engineering attack targeting cryptocurrency users. Attackers contact victims under the pretext of project collaboration and lure them into using a counterfeit “Harmony Voice” application (domain: harmony-voice[.]app) for so-called real-time translation—when in fact it is malicious software. SlowMist has already synchronized the relevant threat intelligence (IOCs) to its enterprise customers.