Flow blockchain has encountered an issue. On December 27th, an attacker discovered and exploited a vulnerability in the Flow execution layer. During the window before validators could perform coordinated stop operations, the hacker successfully stole approximately 390 Flow tokens.

The Flow Foundation subsequently issued a statement. This incident serves as a reminder that even well-known public blockchains are not immune to security vulnerabilities. The protection measures at the execution layer often become the breakthrough point for hackers—they take advantage of the time window before the verification mechanism is activated.

For participants in the Flow ecosystem, this is no small matter. Although 390 tokens represent a limited share within the entire ecosystem, the exposed system vulnerability is particularly noteworthy. The security of a blockchain fundamentally depends on its weakest link—an execution layer coordination delay can be exploited.

The Flow Foundation stated that they will strengthen the investigation and defense against such vulnerabilities. The community is also discussing whether a faster validator response mechanism is necessary. Events like this provide important lessons for the entire industry—highlighting the critical importance of security audits and emergency response.