Flow Foundation: Confirmed that the execution layer vulnerability was exploited, approximately $3.9 million worth of assets flowed out, network rollback has been performed, and restart has been temporarily postponed.

Odaily Planet Daily reports that Flow Foundation issued an official update stating that on December 27, 2025, an attacker exploited a vulnerability in the Flow execution layer to transfer approximately $3.9 million worth of assets off-chain before validator coordination shutdown. The foundation emphasizes that this incident did not affect any existing user balances, and all user deposits remain intact. The outflowed funds were mainly transferred via cross-chain bridges, and the attacker’s address has been identified and flagged. The related money laundering pathways are being tracked in real-time, and requests to freeze assets have been submitted to Circle, Tether, and major exchanges. The foundation states that the network has been isolated, the vulnerability fix has been released and is now in the verification and deployment phase. To remove unauthorized transactions, the network will roll back to a checkpoint before the attack occurred; legitimate transactions submitted during this period will need to be resubmitted after the restart. Based on feedback from validators and ecosystem partners, the foundation has decided to extend the coordination period to ensure network-wide consensus and long-term security, and will not restart hastily before full consultation. User funds remain secure throughout the process, and updates will continue to be released according to the scheduled timeline. Previous news: deBridge co-founder: Rushed rollback of Flow may trigger greater systemic risks