What caused the recent drop in Harmony's ONE token value?
Recently, Harmony's ONE token experienced a significant decline of about 40%. This sharp decrease came after an attacker exploited the Layer 1 blockchain to create roughly 4 billion new tokens. This amount represents more than a quarter of the token's total supply.
Initial investigations indicated that onchain analyst Juiceberg identified this unauthorized minting. Estimates suggested that around 2.8 billion newly minted ONE tokens had been transferred to various exchanges. An alarming 97% of these newly created tokens appeared to have either reached exchange deposit wallets or were sold, leaving only about 115 million ONE tokens remaining for onchain sale.
In response to this incident, Harmony announced its commitment to working with exchanges to freeze the funds linked to the exploit. The network successfully identified four wallet addresses tied to this alarming breach and is currently assessing potential rollback options to restore integrity to the blockchain.
How is Harmony addressing the security breach?
To enhance security measures, Harmony has temporarily halted its bridge and issued an emergency software update for validators. This update aims to prevent any further unauthorized minting of tokens. However, the incident raised questions about how Harmony plans to address the tokens that have already been created and transferred.
Despite the ongoing investigation, Harmony has not yet revealed specific details regarding the vulnerability that allowed the exploit or provided concrete numbers on the amount of ONE tokens that were actually created or moved to exchanges. Before the incident, the circulating supply of ONE tokens was approximately 15 billion, making the 4 billion unauthorized tokens amount to around 26% of the total supply.
What does a rollback mean for Harmony and its users?
A potential rollback would involve restoring the blockchain to a state prior to the exploit, which could eliminate the unauthorized tokens still residing on the network. However, this process would also reverse any legitimate transactions conducted after the rollback point, presenting a complicated dilemma for the network and its users.
This incident echoes a previous major security breach Harmony faced in June 2022, when attackers compromised the Horizon bridge, resulting in losses estimated at around $100 million. The FBI later connected that breach to North Korea’s Lazarus Group, indicating the ongoing vulnerability and risks associated with blockchain technology and cryptocurrencies.