Flow Network Battles Security Threat as Cryptocurrency Plummets

window.litespeed_ui_events=window.litespeed_ui_events||["mouseover","click","keydown","wheel","touchmove","touchstart"];var urlCreator=window.URL||window.webkitURL;function litespeed_load_delayed_js_force(){console.log("[LiteSpeed] Start Load JS Delayed"),litespeed_ui_events.forEach(e=>{window.removeEventListener(e,litespeed_load_delayed_js_force,{passive:!0})}),document.querySelectorAll("iframe[data-litespeed-src]").forEach(e=>{e.setAttribute("src",e.getAttribute("data-litespeed-src"))}),"loading"==document.readyState?window.addEventListener("DOMContentLoaded",litespeed_load_delayed_js):litespeed_load_delayed_js()}litespeed_ui_events.forEach(e=>{window.addEventListener(e,litespeed_load_delayed_js_force,{passive:!0})});async function litespeed_load_delayed_js(){let t=[];for(var d in document.querySelectorAll('script[type="litespeed/javascript"]').forEach(e=>{t.push(e)}),t)await new Promise(e=>litespeed_load_one(t[d],e));document.dispatchEvent(new Event("DOMContentLiteSpeedLoaded")),window.dispatchEvent(new Event("DOMContentLiteSpeedLoaded"))}function litespeed_load_one(t,e){console.log("[LiteSpeed] Load ",t);var d=document.createElement("script");d.addEventListener("load",e),d.addEventListener("error",e),t.getAttributeNames().forEach(e=>{"type"!=e&&d.setAttribute("data-src"==e?"src":e,t.getAttribute(e))});let a=!(d.type="text/javascript");!d.src&&t.textContent&&(d.src=litespeed_inline2src(t.textContent),a=!0),t.after(d),t.remove(),a&&e()}function litespeed_inline2src(t){try{var d=urlCreator.createObjectURL(new Blob([t.replace(/^(?: )?$/gm,"$1")],{type:"text/javascript"}))}catch(e){d="data:text/javascript;base64,"+btoa(t.replace(/^(?: )?$/gm,"$1"))}return d} var litespeed_vary=document.cookie.replace(/(?:(?:^|.*;\s*)_lscache_vary\s*\=\s*([^;]*).*$)|^.*$/,"");litespeed_vary||fetch("/wp-content/plugins/litespeed-cache/guest.vary.php",{method:"POST",cache:"no-cache",redirect:"follow"}).then(e=>e.json()).then(e=>{console.log(e),e.hasOwnProperty("reload")&&"yes"==e.reload&&(sessionStorage.setItem("litespeed_docref",document.referrer),window.location.reload(!0))});

The Trail of a Possible Attack: WFLOW Coin Minting via Proxy

According to the Flow Foundation’s announcement on X, engineering teams are investigating a potential security incident that could affect the network and are taking preventative measures in coordination with network partners. Blockchain analyst Wazz highlighted movements characteristic of an attack right after the price collapse, estimating losses around $4 million.

Altcoin FLOW

Wazz’s analysis suggests the attacker minted millions of wrapped FLOW (WFLOW) using the TransparentUpgradeableProxy contract from a wallet created approximately six months ago. He indicated that this scenario aligns more with a private key compromise than a smart contract vulnerability.

Security expert Taylor Monahan, speaking directly to The Block, pointed out that along with FLOW coin, the attacker also minted bridged assets like WBTC, WETH, and stablecoins. Monahan noted a $3.9 million loss, and said all pools and bridges have been paused.

South Korean Exchanges Halt Transactions, Issue Risk Warning

Following the incident’s revelation, Upbit and Bithumb suspended FLOW coin deposits and withdrawals. The Digital Asset Exchange Alliance (DAXA), uniting South Korea’s top five cryptocurrency exchanges, officially issued a transaction risk for the coin, highlighting that additional protective steps could range from trading restrictions to the cessation of support.

Flow, developed by Dapper Labs, emerged as a prominent Layer-1 network propelled by NFT projects like NBA Top Shot and CryptoKitties, with a focus on consumer applications and digital collectibles. During its peak in 2021, the network witnessed NFT transaction volumes amounting to hundreds of millions of dollars monthly.

Post the cooling of the NFT market, the Flow ecosystem has been under pressure. Dapper Labs, which was once valued at $7.6 billion in 2021, has since conducted multiple rounds of layoffs starting in 2022.