Harmony Confirms a Minting Exploit: 4 Billion ONE Created, 97% Reached Exchanges

The Harmony network confirmed an unauthorised token-minting exploit that created approximately 4 billion ONE tokens. According to the project, the attack exploited software that treated fraudulent deposits as valid.

The number that describes the damage is not how long it took. It is how much of it got out: roughly 97% of the minted supply, about 2.8 billion tokens, reached exchanges before Harmony patched the exploit. No final dollar-loss figure has been released.

Why the exchange share is the number that matters

Minting tokens out of nothing is only half of an attack like this. The other half is converting them, and that is where a network still has a chance to intervene. Once supply is sitting on exchanges it has met real order books and real counterparties, and the options for unwinding it narrow considerably.

A 97% conversion rate says the patch arrived after the part that could be reversed had mostly already happened. That is a statement about detection and response speed rather than about cryptography.

The distinction that keeps getting proven

This adds to a run of operational and smart-contract failures across smaller networks this year, and it reinforces a separation larger participants keep making: protocol-level cryptography and implementation risk are not the same thing. A chain can be sound in its design and still ship software that accepts a deposit it should have rejected.

Broader crypto markets showed limited contagion, with attention staying on larger-capitalisation assets and macro data. The Harmony event is unlikely to move the institutional narrative on its own. It is another entry in a list that has been getting longer, which is the actual thing worth tracking.