{"id":92710,"date":"2025-12-28T13:56:11","date_gmt":"2025-12-28T10:56:11","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=92710"},"modified":"2025-12-28T14:00:17","modified_gmt":"2025-12-28T11:00:17","slug":"flow-token-plummets-40-following-3-9-million-hack","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/flow-token-plummets-40-following-3-9-million-hack\/","title":{"rendered":"FLOW Token Plummets 40% Following $3.9 Million Hack"},"content":{"rendered":"<p>On December 27, the value of the L1 blockchain token <a href=\"https:\/\/forklog.com\/en\/news\/flow-blockchain-and-token-an-l1-for-nfts-and-gamefi\">Flow<\/a> (FLOW) dropped by 40% \u2014 from $0.17 to $0.1. This decline followed an attack causing $3.9 million in damages.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"488\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391-1024x488.png\" alt=\"image\" class=\"wp-image-272658\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391-1024x488.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391-300x143.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391-768x366.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391-1536x732.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/img-4ae9c131e2f79416-2135311258593391.png 1835w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Hourly chart of FLOW\/USDT on Binance. Source: <a href=\"https:\/\/www.tradingview.com\/symbols\/FLOWUSDT\/\">TradingView<\/a>.<\/figcaption><\/figure>\n<p>At the time of writing, the asset had recovered to $0.12.<\/p>\n<p>The incident was first <a href=\"https:\/\/x.com\/WazzCrypto\/status\/2004924043989057838\/photo\/1\">highlighted<\/a> by a user named Wazz. According to him, the attacker issued 5 million FLOW and sold them, draining liquidity pools. It is likely that the perpetrator compromised private keys.\u00a0<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"463\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256-1024x463.png\" alt=\"image\" class=\"wp-image-272659\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256-1024x463.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256-300x136.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256-768x347.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256-1536x694.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/img-b53b3cc9146c86f3-2135311442412256.png 1604w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Transactions of FLOW tokens issued by the hacker. Source: X.<\/figcaption><\/figure>\n<p>Later, the Flow team reported the attack. Initially, developers <a href=\"https:\/\/x.com\/flow_blockchain\/status\/2004894914543571022?s=20\">announced<\/a> an investigation into a &#8220;potential security incident,&#8221; but subsequently confirmed Wazz&#8217;s suspicions.\u00a0<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">This is the verified update from the Flow Foundation.<\/p>\n<p>INCIDENT CONFIRMED<\/p>\n<p>On December 27, 2025, an attacker exploited a vulnerability in Flow&#8217;s execution layer and moved approximately $3.9M in assets off-network before validators executed a coordinated halt.<\/p>\n<p>Critically, this\u2026 <a href=\"https:\/\/t.co\/KEXzo0w8as\">https:\/\/t.co\/KEXzo0w8as<\/a><\/p>\n<p>\u2014 Flow.com (@flow_blockchain) <a href=\"https:\/\/twitter.com\/flow_blockchain\/status\/2005021612714668518?ref_src=twsrc%5Etfw\">December 27, 2025<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>&#8220;The attacker exploited a vulnerability in Flow&#8217;s transaction execution layer and moved assets worth approximately $3.9 million off-network before validators coordinated a halt. Importantly, the attack did not affect user funds,&#8221; the statement said.\u00a0<\/p>\n<\/blockquote>\n<p>The hacker primarily moved assets through Celer, Debridge, Relay, Stargate bridges, and laundered coins via THORChain and Chainflip mixers. His addresses were identified and marked on the blockchain.\u00a0<\/p>\n<p>Developers have released an update to fix the vulnerability. However, the network is currently operating in a limited mode. The blockchain will later be restarted, rolling back its state to the moment before the incident.\u00a0<\/p>\n<p>Flow is a layer-one network designed for issuing <a href=\"https:\/\/forklog.com\/en\/news\/what-are-nfts\">NFTs<\/a> and implementing gaming applications. The project allows the creation of <span data-descr=\"decentralized applications\" class=\"old_tooltip\">dapps<\/span>, digital collectibles, and metaverses.<\/p>\n<p>The attack on the protocol and the token&#8217;s decline prompted some exchanges, such as South Korea&#8217;s <a href=\"https:\/\/upbit.com\/service_center\/notice?id=5890&#038;view=share\">Upbit<\/a> and <a href=\"https:\/\/feed.bithumb.com\/notice\/1651396\">Bithumb<\/a>, to temporarily suspend deposits for FLOW.\u00a0<\/p>\n<p>Earlier in December, the prediction platform Polymarket <a href=\"https:\/\/forklog.com\/en\/news\/polymarket-confirms-user-account-breach\">confirmed<\/a> that several users were affected by a hack related to a vulnerability in a third-party provider.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On December 27, the value of the L1 blockchain token Flow (FLOW) dropped by 40% \u2014 from $0.17 to $0.1. This decline followed an attack causing $3.9 million in damages.<\/p>\n","protected":false},"author":1,"featured_media":92711,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"FLOW token fell 40% after a $3.9 million hack.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1952,596],"class_list":["post-92710","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-flow-blockchain","tag-tokens"],"aioseo_notices":[],"amp_enabled":true,"views":"315","promo_type":"1","layout_type":"1","short_excerpt":"FLOW token fell 40% after a $3.9 million hack.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92710","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=92710"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92710\/revisions"}],"predecessor-version":[{"id":92712,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/92710\/revisions\/92712"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/92711"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=92710"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=92710"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=92710"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}