Harmony Patches Pre-Staking Quorum and Receipt-Replay Flaws After ONE Mint Claim

Harmony released a mainnet patch on Aug. 12 that changes two verification paths after reports of an unauthorized ONE mint: a quorum check affecting pre-staking-epoch committees and a cross-shard receipt mechanism that could apply the same transfer more than once.

The v2026.1.1 release came after Harmony said it was working with exchanges to freeze funds, preparing a patch and evaluating rollback options. Harmony later identified four wallets for exchanges to block and paused its bridge.

For holders and exchanges, the patch supplies new evidence about how ONE balances could be created without a matching debit, but it does not settle the amount already produced or which transactions a rollback would affect. The release and the cited Harmony posts do not specify a rollback point or quantify the disputed supply.

Onchain account Juiceberg claimed that four billion ONE — about 26% of supply — was created and that 2.8 billion ONE was sent to exchanges. Harmony quoted that post in its initial response but did not state those numbers as its own findings.

CoinGecko showed ONE at about $0.000773, down 37.6% over 24 hours. The data provider listed 14.87 billion ONE as both circulating and total supply.

Patch Documents Two Verification Failures

Harmony’s release lists one changelog item, “Cx receipt fixes main,” and links to pull request #5101, which documents two code changes.

The first affected the quorum calculation for pre-staking-epoch committees. The verifier compared the full committee size with the threshold rather than counting the validators enabled in the signer bitmap. The pull request says an all-zero bitmap combined with an all-zero identity aggregate BLS signature could therefore satisfy quorum for those committees.

The fix counts enabled bitmap entries and rejects a nil mask. The pull request also added a test requiring the verification engine to reject an empty pre-staking quorum.

The second flaw concerned cross-shard receipts, the records used to credit assets arriving from another Harmony shard. For receipts from older epochs, the marker showing that a receipt had already been spent relied on proof fields that were not authenticated against the signed block header.

That meant a genuine receipt that had already been applied could be resubmitted with changed proof identifiers. Each replay could appear unspent, allowing Harmony’s code to “credit the destination again with no corresponding source debit,” the pull request says.

The fix now derives the spent marker from the signed header. The pull request changes validation and accounting logic, but it does not contain a rollback of previously accepted state.

Four Billion ONE Remains an Estimate

Harmony’s staking API reported 15.3297 billion ONE in total supply and 15.0105 billion in circulating supply at epoch 3003. The endpoint has no field identifying disputed or replayed balances, so it does not resolve how much unauthorized ONE exists.

The four billion-ONE estimate would equal roughly 26% of the staking API’s reported total supply, consistent with Juiceberg’s percentage claim. But Harmony has not confirmed either that amount or the claim that 2.8 billion ONE reached exchanges. Its wallet-blocking post also did not identify the exchanges involved or state how much had been frozen.

A rollback would determine whether some state already recognized by the network remains valid, while the patch changes how nodes evaluate future blocks and receipts. Harmony’s cited posts say only that rollback options were under evaluation; they do not say which block, balances or transfers would be affected.

Harmony faced an earlier supply dispute after its Horizon bridge lost about $99 million in 2022. The foundation proposed minting either 4.97 billion or 2.48 billion ONE to reimburse affected users, prompting objections over dilution.

By the reporting cutoff, Harmony had released the patch, asked exchanges to block four wallets and paused its bridge. The cited Harmony statements had not supplied an unauthorized-mint total or the parameters of a rollback.