Harmony's Bridge Goes Dark After a Sneaky Replay Bug Drains Funds

Harmony just had a rough day. The team behind the ONE token confirmed that someone found a hole in their cross-shard system and used it to mint tokens that were never supposed to exist.

What actually happened

According to the team, the attacker replayed old cross-shard receipts, basically tricking the network into thinking new blocks needed processing that had already been handled. That let them mint ONE out of thin air and send it to a handful of wallets through several forged transactions.

The numbers are still being confirmed, but early estimates range from a few billion tokens to a much bigger figure once the team dug deeper. Either way, it's messy.

What happens now

Harmony has paused its bridge services while engineers figure out the full scope of the damage. This is the kind of bug that reminds everyone why cross-chain bridges remain one of the weakest links in crypto security. Expect a post-mortem report soon, and probably a patch right after.

For now, if you're holding ONE, keep an eye on official updates before making any big moves.