Harmony said in an incident report that a minting exploit was caused by a Cross-Shard Receipt Replay vulnerability, which may have allowed valid receipts to be processed multiple times and led to minting without corresponding deductions. The team said it has initially confirmed that the first wave of unauthorized minting involved 4 billion ONE. It also estimated the full forged cross-shard issuance at about 3.01 trillion ONE, while noting that the figures are still being verified. Harmony said an emergency patch was released and activated on Aug. 12, and that the vulnerability has been fixed. Cross-chain services have been suspended, and the team is preparing a rollback to the pre-exploit state with a target block of 92,730,034. Shard 0 has already been halted at block 92,753,555 to support the rollback, and the team is coordinating the specific plan with validators and exchanges.
Harmony said in an incident report that the root cause of its minting exploit was a Cross-Shard Receipt Replay vulnerability. According to the team, the flaw may have allowed valid receipts to be processed multiple times, resulting in minting without corresponding deductions.
Harmony said it has initially confirmed that the first wave of unauthorized minting involved 4 billion ONE. The project also put the full forged cross-shard issuance at about 3.01 trillion ONE, while adding that the data is still under review.
The team said an emergency patch was released and activated on Aug. 12, and that the vulnerability has now been fixed. Cross-chain services have been suspended. Harmony is also preparing to roll the network back to its pre-exploit state, targeting block 92,730,034.
To support that process, Shard 0 has been halted at block 92,753,555. Harmony said it is now working with validators and exchanges on the specific rollback plan.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
