harmony

Harmony Protocol released an event update stating that an unauthorized ONE minting incident occurred. Investigations show that the attacker exploited a cross-shard receipt replay vulnerability, allowing processed cross-shard receipts to be executed multiple times, and minted ONE in empty blocks.The team is currently verifying two sets of impact data: early analysis indicates that the first round of minting involved 4 billion ONE, while the latest on-chain reconstruction shows that approximately 3.01 trillion ONE were issued to four attacker wallets through six forged cross-shard transactions. Harmony Protocol confirmed the first round of minting of 4 billion ONE, generated through two empty block accounting transactions that produced 1 billion and 3 billion ONE respectively, of which 2.8 billion ONE were subsequently transferred to other attacker addresses.The team has fixed the cross-shard receipt verification and pre-staking committee quorum verification vulnerabilities and deployed Mainnet v2026.1.1. Bridge services have been suspended, and Harmony Protocol is coordinating with validators, trading platforms, and LayerZero to freeze related funds, preparing to roll back the network to block 92,730,034 before the attack occurred. Currently, Shard 0 has been paused at block 92,753,555, and the official RPC may return a 502 error as a result.

According to Harmony monitoring, Harmony stated that it is advancing the rollback plan and has reached an agreement with validators and exchanges on the specific path. The minting vulnerability fix has been activated, and a complete list of attacker wallets will be announced soon.Previously, the number of ONE tokens abnormally minted on the Harmony network had exceeded 30 trillion, involving 6 abnormal blocks.

Harmony stated that it is collaborating with internal teams and relevant exchanges to attempt to stop and freeze the flow of related funds. A patch and rollback plan are also being developed. Further information will be updated in a timely manner.

"New Stock God" Serenity posted again on platform X, stating: "If we comprehensively consider the cost of components, existing customers, and the scale of the robotics market, the stock price of LeaderDrive is severely undervalued in the coming years. However, I cannot control short-term fluctuations, especially considering the macroeconomic environment."

OKX will open deposits for Harmony (ONE) on January 6 at 15:00, the ONE/USDT trading will start at 18:00, and withdrawals will be available on January 7 at 18:00.

According to the threat intelligence released by the SlowMist security team, its threat intelligence system MistEye has received community feedback regarding an active social engineering attack targeting cryptocurrency users.The attackers contact target users under the pretext of project collaboration, luring them to use a counterfeit "Harmony Voice" software (domain: harmony-voice[.]app) for so-called real-time translation, which is actually malware. SlowMist has synchronized the relevant threat intelligence (IOC) to its corporate clients.

Huawei has launched the Xiaoyi Claw based on the HarmonyOS, which is currently in beta version. According to the introduction, Xiaoyi Claw can assist users with tasks such as document editing, writing PPTs, and automatically replying to emails, supporting multi-device collaboration and presetting various personalities.Previously, the Huawei Xiaoyi Open Platform indicated that it has added the OpenClaw mode.

Regarding Solana's mockery of Starknet with "only 8 daily active users and just 10 daily transactions," and Starknet's subsequent response, "Who told this little brother Solana the data?" He Yi responded on social media, stating: "Take a deep breath and relax, we are all friends, and harmony is precious."He Yi also added "peanuts, sunflower seeds, and mineral water," calling for the outside world to view the related discussions with a more relaxed mindset, avoiding excessive controversy due to on-chain data comparisons.

ChainCatcher news, according to China Business News, HarmonyOS has announced the establishment of an open ecosystem for meta-services, which includes digital renminbi. This means that HarmonyOS users can use the corresponding services without downloading the digital renminbi app, allowing them to make payments with digital renminbi as soon as they get their phones, innovatively achieving a deep integration of legal digital currency functions with the mobile operating system.It is understood that in terms of cooperation with the HarmonyOS system, the next step for digital renminbi will be to strengthen its deep integration with the HarmonyOS system, enrich the application and management functions of the digital renminbi wallet, jointly develop financial middleware, and support interaction with other financial applications, thereby providing safer and more convenient digital renminbi services. At the same time, it will enhance risk monitoring and risk prevention capabilities, using security detection technology to ensure the authenticity and reliability of the mobile operating environment, while protecting user privacy and security, improving the central bank's penetrating regulatory capabilities for digital renminbi, and achieving comprehensive business management and risk prevention. In addition, digital renminbi will help HarmonyOS strengthen its financial service ecosystem, covering more smart IoT devices through the integration of digital renminbi and open-source HarmonyOS.It is understood that through cooperation with HarmonyOS, digital renminbi will form a replicable and promotable model, advancing in-depth cooperation with other domestic mobile phone manufacturers, achieving the embedding of digital renminbi in a componentized form within the underlying operating systems of domestic phones, and building central bank management capabilities that adapt to the open ecosystem of digital renminbi. On this basis, it will continuously improve the cooperation model with mobile phone manufacturers and operating system vendors, creating a collaborative and win-win ecosystem.

ChainCatcher message, Binance will support the Harmony (ONE) and VITE (VITE) network upgrades and hard forks to ensure user experience.Among them:The Harmony (ONE) network upgrade and hard fork will take place at block height 64,847,872 (approximately at 21:00 Beijing time on October 31).The VITE (VITE) network upgrade will take place at block height 166,869,900 (approximately at 22:30 Beijing time on October 31).

ChainCatcher message, Binance announced that it will support the Sei (SEI) and Harmony (ONE) network upgrades and hard forks to ensure the best user experience.The Sei (SEI) network upgrade will take place at block height 84,006,014, approximately on June 19 at 16:00 (UTC). Binance will suspend deposits and withdrawals of tokens on the Sei (SEI) network starting from June 19 at 15:00 (UTC).The Harmony (ONE) network upgrade and hard fork will occur at block height 59,080,704 (around June 20 at 00:07). Binance will suspend deposits and withdrawals of tokens on the Harmony (ONE) network starting around June 19 at 23:07.

ChainCatcher news, according to DL News, reported by Aaron Li, a participant in the Harmony ecosystem of the public chain project, that last December, Harmony had a vulnerability in its staking contract, which resulted in some staking users receiving an excess of 150 million ONE tokens, worth approximately 2.2 million dollars.Aaron Li accused the Harmony team of not responding to the vulnerability in a timely manner within 5 days of the report's release, leading to the problem escalating. Ultimately, Aaron Li decided to investigate the issue personally and found a temporary solution on December 12.On the other hand, Harmony software engineer Casey Gardiner accused Aaron Li of "not reporting the vulnerability in a timely manner" and of selling ONE tokens during the vulnerability period.

ChainCatcher news, according to Chainalysis data, $21.9 million worth of cryptocurrency stolen from Harmony Protocol has recently been transferred to a Russian exchange known for handling illegal transactions.In addition, Chainalysis evidence indicates that since 2021, North Korean entities have been using Russian services (including this exchange) for money laundering.

ChainCatcher news, according to on-chain analyst ZachXBT, the $290 million in hacker funds recently stolen by the North Korean criminal group Lazarus Group has been aggregated on-chain. This includes funds from the Harmony Protocol hack, Atomic Wallet exploit, CoinsPaid hack, and Alphapo hot wallet hack.ZachXBT stated that the funds from such exploits typically end up flowing into over-the-counter trading platforms on Tron.

ChainCatcher news, Harmony announced that it will achieve account abstraction in the second quarter of 2023, providing greater flexibility and functionality for users and developers. Account abstraction is a feature that allows the creation of multiple types of accounts, each with unique functions and characteristics. (source link)

ChainCatcher message, PeckShield monitoring shows that the North Korean Lazarus hacker group laundered approximately $6 million worth of ETH from the Harmony Horizon Bridge vulnerability using Peel Chain technology, integrated it into an address starting with 0xbae5, then exchanged part of the ETH for USDT, and transferred some of the USDT to Huobi and Bybit. (source link)