Flow Flash Crash Update » Foundation confirms hacking of $3.9 million, network is being rebooted

Public Chain Flow Execution Layer Vulnerability Leads to $3.9 Million Outflow, Official Says User Balances Are Safe and Has Initiated Freezing and Patching.
(Background: FLOW “Flash Crash” Over 30%! Suspected Major Cybersecurity Incident, Upbit Suspends Deposits and Withdrawals)
(Additional Context: Flow Has Transitioned to DeFi, The Past Confidence and Dilemma of NFT Top-tier)

The veteran public chain FLOW experienced a flash crash last night (27th), with a decline of over 30% within just a few hours, and its market cap temporarily evaporated by about $100 million. The Flow Foundation also confirmed that it is investigating an incident that “may affect network security.”

Earlier this morning, the foundation announced the latest information:

On December 27, 2025, an attacker exploited a vulnerability in Flow’s execution layer and transferred approximately $3.9M worth of assets off-network before validators executed a coordinated halt.

Most importantly, this vulnerability did not affect existing user balances. All user deposits remain intact.

The foundation’s security team has mapped out the fund outflow path. The current status is as follows:

• Confirmed funds outflow: approximately $3.9M (390 million USD)

  • Mainly transferred via cross-chain bridges (Celer, Debridge, Relay, Stargate)

  • Attacker’s wallet identified and marked

  • Ongoing tracking of money laundering activities through Thorchain/Chainflip

  • Requests for freezing have been submitted to Circle, Tether, and major exchanges

  • Forensic analysis ongoing

• Control status: Completed

  • Network shutdown has cut off all outflow paths

  • No unauthorized activity is currently possible

  • Repair work is in progress

The amount of funds confirmed to have flowed out is within controllable limits and does not threaten the network’s payment capacity or user fund security. The immediate priority is to fix the vulnerability and safely restart.

This is the verified update from the Flow Foundation.

INCIDENT CONFIRMED

On December 27, 2025, an attacker exploited a vulnerability in Flow’s execution layer and moved approximately $3.9M in assets off-network before validators executed a coordinated halt.

Critically, this… https://t.co/KEXzo0w8as

— Flow.com (@flow_blockchain) December 27, 2025

According to the latest information, the FLOW network has now been brought back online and is beginning to produce blocks, but general transaction acceptance remains suspended and is in the final verification stage. The foundation stated it will provide updates every 2 hours until the restart is complete.

Flow Price Rebound

Last night, FLOW’s price on the OKX market dropped to a low of $0.1175, but rebounded after the official update. As of press time, it is reported at $0.14, still about 25% below the pre-attack level. This incident has further hurt the already sluggish FLOW.