Harmony Reports Minting Vulnerability, Says Cross-Shard Replay Bug Led to Unauthorized ONE Issuance

L1 blockchain Harmony released a report on a minting vulnerability, saying the root cause was a Cross-Shard Receipt Replay bug that could allow valid receipts to be processed multiple times and create minting without corresponding deductions. According to Foresight News, the first wave of unauthorized minting was initially confirmed at 4 billion ONE, while the full amount of forged cross-shard issuance was about 3.01 trillion ONE, with the team still verifying the data.An emergency patch was released and activated on August 12, and the vulnerability has been fixed. Harmony said its cross-chain services have been paused and it is preparing to roll back to the state before the vulnerability, targeting block 92,730,034. Shard 0 has been paused at block 92,753,555 to support the rollback, and the team is coordinating specific plans with validators and exchanges.