Harmony’s Response to Security Breach
On August 12, blockchain platform Harmony disclosed that it was collaborating with various cryptocurrency exchanges to halt and freeze assets in response to a suspected security breach within its Layer 1 network. The team announced they were also in the process of crafting a patch and weighing rollback strategies in light of the incident, although they did not provide specifics about the cause of the breach, the total number of unauthorized tokens minted, or the exchanges involved in the asset freezing process.
Unauthorized Minting of Tokens
An on-chain analyst known as Juiceberg highlighted the creation of an unauthorized mint of 4 billion ONE tokens through empty blocks. Following this, Juiceberg detailed that approximately 2.8 billion of these tokens were swiftly transferred to exchanges, leaving around 115 million ONE tokens still available on-chain for trading. It is important to note that Harmony has yet to independently verify these numbers, thus the figures remain as estimates from analysts rather than official confirmations.
Market Impact
According to data from Crypto.news, the incident has drastically affected the market price of ONE, which saw a significant drop, trading at around $0.00083—representing a decline of approximately 32% within a 24-hour period. During this time, the trading volume hit roughly $36.9 million, while the market cap sat at about $13.7 million, indicating a sizable reaction to the minting news. The correlation between the reported security issue and the price tumble is evident, although there is no clear evidence indicating how much of the selling activity was instigated by addresses related to the alleged perpetrator.
Recovery and Historical Context
Moreover, if Juiceberg’s assertion regarding the transfer of 2.8 billion ONE to centralized exchanges is validated, it would become crucial for those exchanges to assist in the recovery process of these assets. This is not the first instance for Harmony regarding complications with token mints; back in December 2023, an internal flaw in staking logic led to the unintentional minting of 146.28 million ONE tokens. In that case, Harmony enacted an emergency hard fork to rectify the issue, which resulted from a mismanagement of undelegation logic after a validator commission adjustment.
Previous Security Breaches
Harmony’s history includes significant security breaches, such as the infamous June 2022 Horizon Bridge hack, where hackers stole nearly $100 million, with subsequent investigations by the FBI linking the attack to North Korea’s Lazarus Group. Though Harmony once proposed a scheme to mint billions of tokens to compensate victims of that theft, they later withdrew the idea due to pushback from the community.
Current Situation and Future Considerations
The latest security incident arises amidst a concerning trend of diminishing decentralized finance (DeFi) activity within the Harmony ecosystem, which has seen user deposits fall by 99% from their 2022 peak. With the current situation developing, analysts are left to ponder numerous unanswered questions:
Can the exchanges efficiently identify and freeze the deposits that were reported? What specific vulnerability allowed the unauthorized minting to occur? And will Harmony eventually opt for a rollback?
A rollback would necessitate clarity regarding the affected range of blockchain transactions and their legitimacy.
Need for Clarity
As of now, Harmony has not provided detailed technical information to elucidate the situation or confirm the speculation surrounding the minted amount of 4 billion ONE. Moving forward, it is essential for the network to issue a verified update that outlines the true extent of the incident, the total assets that were created, the volume that has been successfully frozen by exchanges, and whether the network plans to implement a patch or consider a rollback of the affected transactions.
