Harmony Protocol Executes Blockchain Rollback Following Major Exploit
In response to a confirmed incident involving the unauthorized minting of a vast number of ONE tokens, Harmony Protocol has finalized its remediation plan. The core action involves reverting the state of the affected shard chains to a secure point in time prior to the exploit.
Defining the Rollback Checkpoint
The official announcement specifies that Shard 0 will be rolled back to block height 92,730,034, and Shard 1 to block height 94,978,278. Both blocks correspond to the same timestamp: August 11, 2026, at 23:25:37 UTC. This checkpoint was chosen because the first confirmed fraudulent minting transaction occurred in Shard 0 at block 92,730,036. Reverting to the preceding block provides a safety buffer.
Network validators are required to replace their database with snapshots from these specific block heights. Following this, the network will begin regenerating new blocks starting from heights 92,730,035 and 94,978,279.
The Rationale Behind a Fixed Rollback
When addressing such security breaches, several technical options are typically available. The Harmony team stated they thoroughly evaluated alternatives including targeted token burning, address blacklisting, selective transaction replay, and token migration. However, their analysis concluded that these approaches carried inherent risks, such as potentially affecting unrelated user funds or creating unpredictable inconsistencies in the overall blockchain state.
To ensure absolute clarity and consistency across the network and avoid leaving behind complex issues, the team decided a fixed-window rollback was the safest course. Consequently, all blocks and the regular transactions they contain, which were created after the chosen checkpoint, will be discarded.
Scale of the Incident: Trillions Moved in Minutes
Details released by the team underscore the severity of the exploit. A single wallet, credited with fraudulently minted tokens, attempted 534 transfer transactions within a mere 106-second window, each attempting to move 5 billion ONE. Of these, 477 transactions were successful, resulting in the movement of approximately 2.385 trillion ONE from that wallet.
The team reports that tracing efforts have now mapped over 99.9% of the paths taken by the minted tokens. However, they cautiously note that "tracing to a wallet or cluster" is not synonymous with "identifying the individual behind it" or "being able to safely destroy all related funds," indicating ongoing challenges in the recovery process.
Ongoing Technical Preparations and Collaboration
To facilitate the rollback and preserve evidence, Harmony has completed a full archival of Shard 0 data from block 92,730,035 to 92,871,662. This span encompasses over 141,000 consecutive blocks, about 109,000 regular transactions, and 315 staking transactions.
The team is currently engaged in close communication with major cryptocurrency exchanges, cross-chain bridge providers, and relevant law enforcement agencies. The focus is on collectively assessing the broad impacts of this rollback and developing concrete solutions for handling user assets.
Furthermore, Harmony confirmed that an independent third-party security firm has reviewed the incident, validating the fact of the fraudulent mint and the primary fund flows. Network validators must follow the official recovery procedure guide to execute the rollback.