Flow: Attackers exploited the Flow execution layer vulnerability to transfer approximately $3.9 million worth of assets before the network outage. All user deposits are safe.

DeepFlowTech · 2025-12-28T00:26:49+00:00

On December 28th, Flow officially announced that due to an execution layer vulnerability, an attacker transferred $3.9 million worth of assets before the network shutdown. This attack did not affect user balances, and user deposits remain secure. The outflow of funds mainly occurred through multiple bridges, and the attacker’s wallet has been flagged. Money laundering activities are being tracked. The network has been halted, and a fix is being verified, with a restart expected within 4 to 6 hours.

DeepFlowTech

2025-12-28 00:26:49

Abstract generation in progress

Deep Tide TechFlow News, on December 28, the Flow official platform posted that on December 27, 2025, attackers exploited a Flow execution layer vulnerability to transfer approximately $3.9 million in assets before the network shutdown. This attack did not access users’ existing balances, and all user deposits are safe.

Currently, about $3.9 million in funds are mainly flowing out through bridges such as Celer, Debridge, Relay, Stargate, etc. The attacker’s wallet has been identified and flagged, and their money laundering activities via Thorchain and Chainflip are being tracked in real-time.

The Flow Foundation has submitted freeze requests to Circle, Tether, and major exchanges. The network has been halted to cut off all exit routes, and a fix is undergoing final validation. The confirmed amount of funds outflow is controllable and does not threaten the network’s solvency or user fund security.

The target restart time is within 4 to 6 hours, depending on the testnet validation results. FindLabs is releasing forensic data that includes transaction hashes and the attacker’s Ethereum wallet address.

FLOW7,87%

CELR0,31%

DBR7,6%

STG-1,02%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.