The team behind the ONE token has shared fresh numbers on the fallout from last month's exploit. In this Harmony Protocol update, it has matched on-chain transaction data against records from six exchanges, cutting the estimated token gap nearly in half.
The findings cover deposits, withdrawals, cross-platform transfers, and returned funds, giving holders a clearer picture of where things stand ahead of a key validator deadline.
At a Glance
Harmony ONE Update: the protocol has finished tracing fund flows tied to the August 11 incident.
The combined ONE shortfall across six exchanges has fallen from roughly 10.23 billion to about 6.58 billion tokens.
Around 35.91 billion ONE moved directly from confirmed hacker wallets into exchanges, with close to 30 billion landing on Binance.US.
Deposits, withdrawals, and trading remain paused on affected platforms until each exchange sets its own reopening date.
Validators may stop operating on September 10, 2026, at 7 a.m. Pacific (14:00 UTC) as part of the Ethereum migration plan.
Following the August 11 incident, the team traced deposits, withdrawals, and cross-exchange movement using public blockchain records, then checked those findings against internal data from Binance, Gate, KuCoin, MEXC, OKX, and Binance.US.
All six platforms confirmed the tracing results. That joint review is the basis for the newly announced shortfall figure of roughly 6.58 billion ONE, down sharply from the earlier working estimate of about 10.23 billion tokens.

Source: HarmonyProtocol X Post
The 3.65 billion token drop doesn't represent freshly recovered funds. Instead, it reflects a more accurate accounting once cross-exchange transfers, self-cycle flows, and rolled-back or returned transactions were factored in.
Investigators matched 295 cross-exchange transfers worth about 3.49 billion ONE across 16 routes, plus a modeled self-cycle at Binance worth close to 372 million tokens. Once these were reconciled, the combined shortfall estimate moved from its earlier figure down to the current total.
Here's the exchange-by-exchange breakdown after adjustments:
| Exchange | Before Adjustments | Current ONE Shortfall |
| Binance | 3.248B | 2.751B |
| Gate | 2.081B | 1.968B |
| KuCoin | 3.494B | 488.29M |
| MEXC | 138.71M | 102.63M |
| OKX | 974.67M | 973.91M |
| Binance.US | 297.17M | 297.17M |
| Total | 10.234B | 6.581B |
KuCoin saw the steepest reduction thanks to successful freezes and tracing work, while OKX and Binance.US figures are largely unchanged and still pending final sign-off in some cases.
Roughly 35.91 billion ONE moved straight from confirmed hacker-controlled wallets into exchange accounts. Binance.US alone received close to 30 billion tokens through six transfers of 5 billion ONE each, a clear mass-spray pattern.
KuCoin received about 3.49 billion tokens before that spray phase began, Gate took in nearly 1.98 billion across 198 separate transfers, and Binance received roughly 440 million tokens early on. Investigators note that this spray pattern alone doesn't prove the receiving accounts were under hacker control.

Source: Wu Blockchain X
Tracing 295 separate transfers, worth about 3.49 billion tokens, let the team match funds moving between platforms rather than treating them as lost. KuCoin was the largest outgoing source at roughly 3.01 billion tokens, while Binance exchange received the largest matched inflow at about 2.11 billion.
A handful of Gate-to-MEXC transfers totaling 29.27 million tokens were returned or never credited, and a separate two-exchange cycle worth 5.11 million tokens was also identified and excluded from MEXC's shortfall.
| Date/Stage | Key Development |
| Aug. 11, 2026 | Incident affecting ONE fund flows |
| After incident | On-chain tracing of deposits, withdrawals, transfers |
| Reconciliation phase | Six exchanges verify traced flows |
| Final adjustment | Shortfall reduced from 10.23B to 6.58B ONE |
| Sept. 8, 2026 | Latest reconciliation figures announced |
| Sept. 10, 2026 | Validator transition begins at 14:00 UTC |
Restoring normal ONE deposits, withdrawals, and trading is now the top priority. Each exchange will set and announce its own reopening timeline, so holders shouldn't assume every platform will resume access at the same time. This effort is being run alongside the broader ONE token migration and validator transition plan already underway.
Validators tied to the current network may stop operating starting September 10, 2026, at 7 a.m. Pacific (14:00 UTC). That deadline is directly linked to the exchange reopening effort, since both fall under the same migration proposal.
Holders should keep an eye on three things going forward: individual exchange reopening announcements, any remaining reconciliation updates from OKX and Binance, and confirmation of how the validator transition unfolds.
The latest figures mark real progress in sorting out the August 11 Harmony crypto hack, but the process isn't finished. Some exchange numbers, including OKX and part of Binance's total, are still described as provisional. Holders should treat the 6.58 billion shortfall as the current working estimate rather than a final settlement.
Disclaimer: This article is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency markets are volatile and carry risk. Always do your own research and consult a qualified professional before making financial decisions.