Flow Confirms Exploit at Execution Layer, User Funds Remain Secure

Vulnerability Incident Overview

(Source: flow_blockchain)

Flow’s official team recently issued a statement on X (formerly Twitter), reporting that attackers exploited a technical vulnerability in the execution layer to transfer assets just before a brief network outage. According to the official disclosure, about $3.9 million in assets were moved during the incident. No existing user account deposits were affected, and users’ funds remain secure.

Asset Flow and Tracking Progress

The Flow team explained that the stolen assets were primarily transferred via several cross-chain bridges, including Celer, deBridge, Relay, and Stargate. The team has already identified the attacker wallets and continues to monitor their activity. They are conducting real-time on-chain tracking as the attackers attempt to mix and convert funds using Thorchain and Chainflip.

Additionally, the Flow Foundation proactively reached out to Circle, Tether, and several major centralized exchanges, requesting their assistance in freezing assets to reduce the risk of further movement.

Protocol Remediation and Network Status

In response to this vulnerability, Flow’s team released a patch and coordinated with node operators to complete the upgrade deployment. The team emphasized that all user assets and balances prior to the vulnerability window were unaffected. They will conduct a final confirmation once the network is fully restored.

About the Flow Public Blockchain

Flow is a Layer 1 blockchain developed by Dapper Labs, designed as consumer-focused public infrastructure. It is purpose-built for NFTs, blockchain gaming, and Web3 applications. The network is known for high performance, low transaction costs, and excellent user experience. NBA Top Shot, a leading digital collectibles platform, is among its most prominent ecosystem applications.

To learn more about Web3, click to register: https://www.gate.com/

Summary

This incident demonstrated that the execution layer can still face risks under extreme conditions. However, the Flow team acted swiftly by shutting down the network, patching the vulnerability, and tracking asset flows in real time. Their response successfully contained the impact at the protocol level and protected user assets. As remediation concludes and network operations resume, this event serves as a strong reminder for the entire public blockchain ecosystem about the importance of rapid incident response and cross-sector collaboration when addressing unforeseen risks.