Ontology Halts Mainnet Block Production After Malicious Activity Detected

Ontology, the identity-focused public blockchain behind the ONT and ONG tokens, has paused block production on its mainnet after its core development team detected malicious activity targeting the network. In a Sept. 1 update, Ontology said user assets were not compromised and framed the halt as a precaution to allow time for security remediation and a network upgrade before operations resume. A notice on the project's official website said the mainnet will remain temporarily paused while the technical team and validators execute the security response. Ontology is aiming to restore normal operations within 24 hours, contingent on completing security checks, remediation, testing, and validator verification. The team said it will issue a follow-up announcement once the network is ready to restart. The shutdown began Aug. 31 as what Ontology called an emergency pause after a potential security issue surfaced during a routine security check. At that time, the team said no incident had been confirmed and there were no signs of losses or compromise involving ONT, ONG, or other on-chain assets. By Sept. 1, Ontology said it had confirmed malicious attack activity aimed at the network, while reiterating that its investigation found no impact to the security of user assets. The mainnet, live since 2018, will stay paused until upgrade and verification work is completed, with the team coordinating with validators and ecosystem partners. With block production suspended, on-chain transactions are not being processed. Ontology advised users to avoid time-sensitive transfers until it confirms the network has resumed. ONT and ONG holders, validators, and applications built on the Ontology EVM are most directly affected. The team said users do not need to move or take any action with their assets, describing the pause as a proactive security measure rather than a response to confirmed asset loss. The disruption also affects services tied to Ontology's identity and reputation stack, including ONT ID credentials and decentralized identity verification applications. Off-chain services such as the ONTO wallet remain available, but any on-chain interaction is effectively frozen until block production restarts. Ontology said it is completing remediation, upgrading network components, and running extensive testing and validation. It also plans to coordinate with third-party security organizations for additional assessment before resuming, extending the review beyond its internal investigation. The move reflects a broader trend of preventive chain halts across the sector. Cronos paused its blockchain on Aug. 31 following an exploit involving the Tectonic lending protocol, and a separate disclosure of a Solana card contract vulnerability highlighted how quickly security findings can disrupt day-to-day activity for users and builders. Preventive pauses—stopping block production to contain suspected threats before losses are confirmed—have become a more common incident-response tool as attacks grow more sophisticated. Ontology also pointed to artificial intelligence as a factor contributing to increasingly advanced security threats. For a network best known for decentralized identity and reputation rather than high-volume DeFi, the outage appears contained so far, though the full scope of the activity and the exact restart timing depend on the ongoing security review. A key near-term question is whether Ontology can resume within its stated 24-hour window or whether third-party assessments uncover issues that extend the pause.