An attacker minted bout 26% of supply, inflating the token count from around 15B to 19B and sending ONE down 38%.

Harmony asked exchanges to freeze funds tied to four wallets, paused its token bridge, and said it is working on a patch and rollback options. The team has not yet explained how the attacker was able to mint the tokens.

It stirs memories of Harmony's 2022 Horizon bridge hack, a roughly $100M theft the FBI attributed to North Korea's Lazarus Group, plus a 2023 staking bug that mis-minted 146M ONE.