Flow suffers $3.9 million loss in hacker attack, user deposits remain unaffected

PANews reported on December 28 that the Flow Foundation stated that on December 27, an attacker exploited a vulnerability in the Flow execution layer and transferred approximately $3.9 million in assets out of the network before validators could coordinate to halt operations. This attack did not affect the balances of existing users. All user deposits remain intact.

The protocol fix has now been developed and released, and node operators are coordinating to deploy this upgrade. The network will be rolled back to a checkpoint prior to the exploit to remove unauthorized transactions.