Harmony Suffers $3.2 Million Loss Due to Replay Attack
Harmony experienced an estimated loss of $3.2 million due to a vulnerability in its system. Unauthenticated proof fields allowed for the replay of old cross-shard receipts, resulting in unauthorized credits of ONE tokens.
The incident involved Harmony, which reported an estimated loss of $3.2 million. This occurred when unauthenticated proof fields enabled the replay of old cross-shard receipts, allowing for the crediting of ONE tokens without a corresponding source debit. As a result, Harmony confirmed an initial mint of 4 billion ONE tokens, while its broader reconstruction reached 3.01 trillion tokens.
In response to the incident, a rollback is planned, although specific exchanges involved have not been disclosed. The nature of the vulnerability highlights significant issues within the system's authentication processes, leading to unauthorized token generation. Further details regarding the chain involved were not provided, leaving the tracing of transactions unclear.