Flow exploit on 2025-12-27 ($3.9M reported)
Exploit, 27 Dec 2025. Reported loss $3.9M. Last verified 4 Nov 2026.
notable
Reported loss
$3.9M
as reported by the sources
Recovered
-
nothing reported
Status
Resolved
updated 26 Oct 2026
Date
other
Summary
On 2025-12-27 an attacker exploited a vulnerability in the Flow network to counterfeit tokens and bridged approximately $3.9 million off-network before validators halted the chain. Flow Foundation and Binance later said the incident was fully resolved.
- Protocol
- Flow
- Type
- Exploit
- Reported loss
- $3,900,000 · as stated: approximately $3.9 million source: flow.com ↗
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | December 27, 2025 | flow.com ↗ |
| Amount (USD) | approximately USD 3.9 million | flow.com ↗ |
| Status | full resolution | flow.com ↗ |
Primary sources
- Flow: Dec 27 technical post-mortem ↗ post-mortem · accessed 2026-11-04
- Flow: joint resolution with Binance ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram