Harmony has shifted from evaluating several recovery options to implementing a specific blockchain rollback after an attacker exploited the network to forge trillions of ONE tokens. The recovery plan will remove the fraudulent state but also eliminate legitimate activity recorded after the selected checkpoints, making the intervention one of the most disruptive responses available to an operating blockchain.
In an Aug. 17 incident update, Harmony said validators would switch to replacement databases corresponding to shard 0 block 92,730,034 and shard 1 block 94,978,278. Both checkpoints correspond to Aug. 11 at 23:25:37 UTC.
Harmony’s rollback will remove the forged ONE-token state while also discarding legitimate transactions and other blockchain activity recorded after the selected Aug. 11 checkpoints.
The first confirmed forged mint appeared on shard 0 at block 92,730,036. Harmony selected the preceding block as a safety buffer because the intervening block contained no standard transactions, staking activity, incoming receipts or gas consumption and retained the same state.
Although the fraudulent mint did not occur on shard 1, Harmony included a corresponding checkpoint there as a precaution. Once validators move to the replacement databases, new blocks will resume from heights 92,730,035 on shard 0 and 94,978,279 on shard 1.
Selective Recovery Options Rejected
Harmony said it had considered several alternatives before deciding on the database replacement. Options included targeted token burns, blacklisting wallets, migrating affected tokens, selectively replaying transactions and performing a simpler database rewind.
Those approaches were ultimately rejected because the forged ONE had moved across a broad range of cryptocurrency infrastructure. The tokens passed through centralized exchanges, decentralized exchange pools, smart contracts, bridges, staking positions and shared wallets.
As a result, selectively removing suspicious balances could affect legitimate users whose assets had become mixed with the forged tokens. Harmony also determined that partial intervention could leave the blockchain with inconsistent state across different applications and services.
Extensive Token Movement Complicates Recovery
The investigation has identified rapid movement from at least one wallet associated with the forged mint. Harmony said the wallet attempted 534 transfers involving 5 billion ONE each within 106 seconds. Of those transactions, 477 were successful, moving approximately 2.385 trillion ONE.
The company’s subsequent flow analysis accounted for nearly all of the forged amount as it moved across different services and incurred transaction fees.
Harmony has emphasized that tracing tokens to a wallet, exchange, liquidity pool or other service does not establish who controlled the assets. It also does not necessarily make those funds suitable for destruction because shared wallets and pooled balances may contain assets belonging to unrelated users.
The investigation remains ongoing, with Harmony working alongside exchanges, bridges, law enforcement agencies and an independent security firm.
Legitimate Transactions Will Be Lost
The rollback also carries a significant cost for users because the affected shard-0 archive contains 141,628 consecutive blocks. Those blocks include 109,126 regular transactions and 315 staking transactions.
Harmony classified 95.8% of the regular transactions as automated, but the remaining activity includes legitimate transactions that cannot be safely reconstructed without risking further inconsistencies.
The replacement chain will alter balances, transaction nuances, liquidity-pool reserves, token approvals, swap deadlines and staking positions, creating potential complications for users and applications that interacted with the network after the checkpoint.
— Harmony 💙 (@harmonyprotocol) August 17, 2026
Replaying transactions from the discarded chain could also produce different outcomes. Changes to account balances, contract state or transaction ordering could cause a previously successful transaction to fail or allow a transaction that previously failed to succeed.
Exchanges and Bridges Face Operational Challenges
The incident highlights the difficulties of restoring a live blockchain after fraudulent state has propagated across interconnected infrastructure. Because Harmony’s rollback creates a discontinuity between the discarded chain and replacement databases, exchanges, bridges and other services will need to account for the change when processing deposits, withdrawals and other transactions.
The recovery plan is intended to eliminate the forged state, but its successful execution will depend on coordinated action among validators and ecosystem operators. The incident also underscores the broader operational risks associated with cross-chain systems and decentralized financial infrastructure, where assets can move rapidly across multiple platforms before an attack is detected.
Harmony’s decision therefore represents a trade-off between removing a large-scale fraudulent mint and preserving legitimate activity. The rollback is designed to restore a trustworthy state, but the resulting loss of valid transactions demonstrates the potentially far-reaching consequences of recovering a blockchain after an exploit has already spread through its ecosystem.
