# Technical Incident Report: Staking Logic Vulnerability and Exploitation **URL:** \ **Category:** Protocol\ **Created:** [December 21, 2023, 4:06pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660 "2023-12-21T16:06:24Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![teleno](https://avatars.discourse-cdn.com/v4/letter/t/50afbb/32.png) [@teleno](https://talk.harmony.one/u/teleno)\ **Post date:** [January 25, 2024, 11:10am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/21 "2024-01-25T11:10:12Z")
My account was finally unlocked. Thanks. ---
**Author:** ![az484](https://avatars.discourse-cdn.com/v4/letter/a/cdc98d/32.png) [@az484](https://talk.harmony.one/u/az484)\ **Post date:** [January 29, 2024, 2:12pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/22 "2024-01-29T14:12:01Z")
I was trying to burn the ONES whit Harmony CLI whit the comand “./hmy --node=“[https://api.harmony.one/](https://api.harmony.one/)” transfer --amount 2094.8673360000003 --to one1qqqqqqqqqqqqqqqqqqqqqqqqqqqqph4d6xartj --from-shard 0 --to-shard 0 --from one13fgzlk57kjn9u9fzxyt2cuessf3zq2d064gu55” and I am getting the error "[ { “transaction-hash”: “0x751bc3df6623a07244c4a8f053bda6ec007aca16b8ab244b4e5da5600d679db2”, “errors”: [ “[2024-01-29 14:09:41.634239] could not confirm transaction after 40 seconds”, “[2024-01-29 14:09:41.634245] Failed to confirm transaction” ], “time-signed-utc”: “2024-01-29 14:08:37.338025” } ] commit: v1-c38f4e4, error: Failed to confirm transaction " ---
**Author:** ![sophoah](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/sophoah/32/249_2.png) [@sophoah](https://talk.harmony.one/u/sophoah)\ **Post date:** [January 30, 2024, 9:41am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/23 "2024-01-30T09:41:14Z")
hey, give us 24h-48h, we are doing some changes that would allow that. We’ll move the next blacklist update to Thursday. ---
**Author:** ![Jose](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@Jose](https://talk.harmony.one/u/Jose)\ **Post date:** [January 31, 2024, 7:52pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/24 "2024-01-31T19:52:49Z")
Hi there, I’m trying to claim my rewards and undelegate my tokens in the Harmony Browser but it says that the Browser is Obsolete. Amy help please ---
**Author:** ![sophoah](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/sophoah/32/249_2.png) [@sophoah](https://talk.harmony.one/u/sophoah)\ **Post date:** [February 1, 2024, 8:18am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/25 "2024-02-01T08:18:12Z")
hey @az484 can you retry the burn ? thanks > [@Jose](#): > > Hi there, I’m trying to claim my rewards and undelegate my tokens in the Harmony Browser but it says that the Browser is Obsolete. Amy help please can you by harmony browser are you referring to extension ? or the actual browser (aka chrome) ? If browser, please update it. If wallet, then you will need to export your private key or use frontier or guarda to import your account with the mnemonic if you still have. ---
**Author:** ![az484](https://avatars.discourse-cdn.com/v4/letter/a/cdc98d/32.png) [@az484](https://talk.harmony.one/u/az484)\ **Post date:** [February 1, 2024, 10:50am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/26 "2024-02-01T10:50:50Z")
Yes I can, I make the transaction Thanks ---
**Author:** ![Jose](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@Jose](https://talk.harmony.one/u/Jose)\ **Post date:** [February 1, 2024, 6:04pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/27 "2024-02-01T18:04:25Z")
Hi, I think is the browser, this is my address one1ytxeedfu6xscs5tqht7h7q4jrnn6vwnz3jaf3n which is delegated in StrongMindsHold but is unable to claim rewards or undelegate. ---
**Author:** ![sophoah](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/sophoah/32/249_2.png) [@sophoah](https://talk.harmony.one/u/sophoah)\ **Post date:** [February 2, 2024, 4:31am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/28 "2024-02-02T04:31:07Z")
do you have the a wallet that has your address one1ytxeedfu6xscs5tqht7h7q4jrnn6vwnz3jaf3n the wallet is used to sign the transaction, if no wallet, then you can’t sign. if no wallet, you will need to recreate your account using the mnemonic or private key which i hope you have a backup This thread might help you : [Delegation/Undelegation Issues using Chrome Harmony Wallet - #19 by FortuneValidator](https://talk.harmony.one/t/delegation-undelegation-issues-using-chrome-harmony-wallet/23726/19) you can continue there if you want since this thread is for the blacklist discussion Thanks ---
**Author:** ![az484](https://avatars.discourse-cdn.com/v4/letter/a/cdc98d/32.png) [@az484](https://talk.harmony.one/u/az484)\ **Post date:** [February 11, 2024, 12:19pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/29 "2024-02-11T12:19:24Z")
I couldn’t claim rewards again ☹ ---
**Author:** ![kobov9000](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/kobov9000/32/878_2.png) [@kobov9000](https://talk.harmony.one/u/kobov9000)\ **Post date:** [February 11, 2024, 6:30pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/30 "2024-02-11T18:30:15Z")
those are on me too…something has to be done or they will multiply … ---
**Author:** ![kobov9000](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/kobov9000/32/878_2.png) [@kobov9000](https://talk.harmony.one/u/kobov9000)\ **Post date:** [February 11, 2024, 6:44pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/31 "2024-02-11T18:44:24Z")
can you please describe the process. How can I check if my address is blacklisted and then if so black listed…please step by step I find it very hard to navigate the info in the forum 😕 ---
**Author:** ![teleno](https://avatars.discourse-cdn.com/v4/letter/t/50afbb/32.png) [@teleno](https://talk.harmony.one/u/teleno)\ **Post date:** [February 12, 2024, 7:05am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/32 "2024-02-12T07:05:52Z")
There was an issue at the network. It must be working right now. ---
**Author:** ![kobov9000](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/kobov9000/32/878_2.png) [@kobov9000](https://talk.harmony.one/u/kobov9000)\ **Post date:** [February 12, 2024, 10:30am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/33 "2024-02-12T10:30:21Z")
I had a sleepless night and found out that node operators were not producing blocks waiting for sync but there was nothing to resemble an announcement here, which is a shame.I was really in panic not knowing what is happening not able to find any info anywhere. I am done with Harmony I cant live with such stressful moments. This chain is being raped by scammers, hackers and errors but the lack of informational infrastructure is crucial. The chain now looks ok to undelegate and get the hell out of here untill I still can. I feel like the harmony ship is sinking. ---
**Author:** ![miniWinks](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/miniwinks/32/16129_2.png) [@miniWinks](https://talk.harmony.one/u/miniWinks)\ **Post date:** [February 12, 2024, 3:08pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/34 "2024-02-12T15:08:48Z")
Hi I was referred by Mauricio to lodge my problem here. I am a delegator since 2020. I just found out over a million ONE transferred out from my wallet in an exploit not initiated by me. My Metamask activity log has been scrubbed and all txns are showing zero. I am not a technical person, please tell me how to check if my wallet is being blacklisted above. My ONE address is one10jm8mz7wsd6y2etrgpy0xslf2r4sxcx2yhfu3k My EVM address is 0x7CB67D8bCE83744565634048f343e950eb0360Ca ![photo_5067094238935757523_y](https://canada1.discourse-cdn.com/flex035/uploads/harmony1/original/3X/1/e/1e56021654f6235e17b5823fa0f07f47c0cc24cd.jpeg) ---
**Author:** ![sophoah](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/sophoah/32/249_2.png) [@sophoah](https://talk.harmony.one/u/sophoah)\ **Post date:** [February 13, 2024, 3:57am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/36 "2024-02-13T03:57:41Z")
> [@kobov9000](#): > > I had a sleepless night and found out that node operators were not producing blocks waiting for sync but there was nothing to resemble an announcement here, which is a shame.I was really in panic not knowing what is happening not able to find any info anywhere. I am done with Harmony I cant live with such stressful moments. This chain is being raped by scammers, hackers and errors but the lack of informational infrastructure is crucial. The chain now looks ok to undelegate and get the hell out of here untill I still can. I feel like the harmony ship is sinking. hey sorry about that we were doing the communication on the harmony #network-announcement discord channel ---
**Author:** ![sophoah](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/sophoah/32/249_2.png) [@sophoah](https://talk.harmony.one/u/sophoah)\ **Post date:** [February 13, 2024, 4:02am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/37 "2024-02-13T04:02:42Z")
> [@miniWinks](#): > > Hi I was referred by Mauricio to lodge my problem here. > I am a delegator since 2020. > I just found out over a million ONE transferred out from my wallet in an exploit not initiated by me. > My Metamask activity log has been scrubbed and all txns are showing zero. > > I am not a technical person, please tell me how to check if my wallet is being blacklisted above. > My ONE address is one10jm8mz7wsd6y2etrgpy0xslf2r4sxcx2yhfu3k > My EVM address is 0x7CB67D8bCE83744565634048f343e950eb0360Ca Hey I am sorry to see that also happened to you. Unfortunately we cant do much here. I followed the fund and they went all the way to kucoin exchange hot wallet. It was the same pattern as other impacted victim. And I was communicating the below : > Victim(s) are advised to inform the local police or any other law enforcement institutions, and send us a duly signed official documents (with their agency’s letterhead), which states the brief introduction of the case, the information their agency requires, the legal ground of their agency to obtain the information, the identification of the contact person, and their commitment to confidentiality obligations, to our legal department: [rbenquiries@kucoin.com](mailto:rbenquiries@kucoin.com) and copy [risk\_management@kucoin.com](mailto:risk_management@kucoin.com). Sorry for your loss … ---
**Author:** ![kobov9000](https://yyz1.discourse-cdn.com/flex035/user_avatar/talk.harmony.one/kobov9000/32/878_2.png) [@kobov9000](https://talk.harmony.one/u/kobov9000)\ **Post date:** [February 13, 2024, 10:52am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/38 "2024-02-13T10:52:37Z")
I could not join the discord because of my antivirus program. The Nod32 detected an intrusion attempt when trying to verify. Given the so many scammers here I was honestly scared to ignore the warning message therefore decided not to continue pushing the discord connection. As a result I have decided to sell my coins and forget about Harmony for ever, I do not feel safe using the chain. There are more scammers here than normal people…this is just insane! ---
**Author:** ![joeldsp](https://avatars.discourse-cdn.com/v4/letter/j/9fc29f/32.png) [@joeldsp](https://talk.harmony.one/u/joeldsp)\ **Post date:** [February 16, 2024, 8:16pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/39 "2024-02-16T20:16:30Z")
Hola, tienen soporte en español? ---
**Author:** ![teleno](https://avatars.discourse-cdn.com/v4/letter/t/50afbb/32.png) [@teleno](https://talk.harmony.one/u/teleno)\ **Post date:** [February 17, 2024, 12:23am UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/40 "2024-02-17T00:23:42Z")
No, pero puedes usar el google translator para traducir tus preguntas al inglés y así obtener el soporte que necesitas. ---
**Author:** ![Marcos\_ender](https://avatars.discourse-cdn.com/v4/letter/m/8c91f0/32.png) [@Marcos\_ender](https://talk.harmony.one/u/Marcos_ender)\ **Post date:** [February 21, 2024, 8:41pm UTC](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660/41 "2024-02-21T20:41:38Z")
Hi Team, it’s been a week trying to delegate/transfer my Harmony one but still failed. It always says "Failed: Transaction was not mined within 50 blocks, please make sure transaction was properly sent. Be aware that it might still be mined! [Previous page](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660.md?page=1) [Next page](https://talk.harmony.one/t/technical-incident-report-staking-logic-vulnerability-and-exploitation/23660.md?page=3)