Flow faces rollback backlash after $3.9m exploit hits execution layer

cryptonews

Dec 29, 2025

Flow halts after a $3.9m exploit, ditches a full rollback plan and opts for targeted token burns to preserve user activity and restore trust. Summary An attacker exploited Flow’s execution layer ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

{"basename":"","ssrTDKData":{"titleTemplate":"%s - Tiger Brokers","title":"Tiger Brokers | Global Stocks, Options & Futures Trading App","description":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","keywords":"tiger brokers,tiger trade,tiger brokers singapore,broker online,stock trading in singapore,share trading singapore,brokerage firm singapore,trading app,stock broker singapore,stock trading platforms,trading account","social":{"ogDescription":"Tiger Brokers, one-stop investment in US stocks, SGX stocks, HK stocks, A-shares & other global assets. One of the best stock trading platforms in Singapore.","ogImage":"https://c1.itigergrowtha.com/portal5/static/media/og-logo.be62fbe1.png","ogUrl":"https://www.itiger.com/news/2595781970"},"companyName":"Tiger Brokers"},"pageData":{"isMobile":false,"isTiger":false,"isTTM":true,"region":"SGP","license":"TBSG","edition":"fundamental"},"isCrawlerRequest":true,"__swrFallback__":{"@#url:\"https://stock-news.skytigris.cn/v3/news\",params:#id:\"2595781970\",edition:\"fundamental\",auth_exemption:1,,,undefined,":{"share":"https://ttm.financial/m/news/2595781970?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2025-12-29 18:35","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2595781970","market":"sg","top_or_hot":-1,"title":"Flow faces rollback backlash after $3.9m exploit hits execution layer","media":"cryptonews","content":"<div>\n<p>Flow halts after a $3.9m exploit, ditches a full rollback plan and opts for targeted token burns to preserve user activity and restore trust.\n\n\nSummary\n\n\n\nAn attacker exploited Flow’s execution layer ...</p>\n\n<a href=\"https://crypto.news/flow-faces-rollback-backlash-after-3-9m-exploit-hits-execution-layer/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Flow faces rollback backlash after $3.9m exploit hits execution layer</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nFlow faces rollback backlash after $3.9m exploit hits execution layer\n</h2>\n\n<h4 class=\"meta\">\n\n\n2025-12-29 18:35 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/flow-faces-rollback-backlash-after-3-9m-exploit-hits-execution-layer/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Flow halts after a $3.9m exploit, ditches a full rollback plan and opts for targeted token burns to preserve user activity and restore trust.\n\n\nSummary\n\n\n\nAn attacker exploited Flow’s execution layer ...</p>\n\n<a href=\"https://crypto.news/flow-faces-rollback-backlash-after-3-9m-exploit-hits-execution-layer/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"FLOW","symbol_name":"Global X U.S. Cash Flow Kings 100 ETF","start_time":0,"source_url":"https://crypto.news/flow-faces-rollback-backlash-after-3-9m-exploit-hits-execution-layer/","article_id":"2595781970","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/flow-faces-rollback-backlash-after-3-9m-exploit-hits-execution-layer/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2595781970","pubTimestamp":1767004517,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Flow halts after a $3.9m exploit, ditches a full rollback plan and opts for targeted token burns to preserve user activity and restore trust.An attacker exploited Flow’s execution layer for about $3.9m via cross-chain bridges before validators halted the network and sought freezes from issuers and exchanges.A proposed rollback to a pre-attack checkpoint drew criticism from bridge operators and lawyers, who warned of doubled balances, unbacked assets and trust damage.Flow’s revised plan scraps a global rollback, targets fraudulent mints, phases the restart and restricts flagged accounts while preserving legitimate user activity.Flow blockchain’s proposal to reverse transactions following a $3.9 million exploit triggered opposition from ecosystem partners, prompting the network’s foundation to revise its remediation approach.Gabriel Shapiro, general counsel at Delphi Labs, stated the approach risked pushing losses onto bridges and issuers by creating unbacked assets. Smirnov argued that ","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"FLOW":"Global X U.S. Cash Flow Kings 100 ETF","BK4161":"工业机械"},"translate_title":"390万美元漏洞攻击执行层后，Flow面临回滚强烈反对","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"FLOW":1},"content_text":"Flow halts after a $3.9m exploit, ditches a full rollback plan and opts for targeted token burns to preserve user activity and restore trust.\n\n\nSummary\n\n\n\nAn attacker exploited Flow’s execution layer for about $3.9m via cross-chain bridges before validators halted the network and sought freezes from issuers and exchanges.\nA proposed rollback to a pre-attack checkpoint drew criticism from bridge operators and lawyers, who warned of doubled balances, unbacked assets and trust damage.\nFlow’s revised plan scraps a global rollback, targets fraudulent mints, phases the restart and restricts flagged accounts while preserving legitimate user activity.\n\n\n\nFlow blockchain’s proposal to reverse transactions following a $3.9 million exploit triggered opposition from ecosystem partners, prompting the network’s foundation to revise its remediation approach.\nFlow crypto moves along with cross-chain bridges\nAn attacker exploited a vulnerability in Flow’s (FLOW) execution layer on Dec. 27, extracting approximately $3.9 million in assets through multiple cross-chain bridges before validators halted the chain, according to Flow Foundation. The foundation and forensic partner FindLabs stated that existing user balances were not accessed and that the exploit was contained, with freeze requests sent to major exchanges and stablecoin issuers.\nThe attacker’s Ethereum wallet was identified, and investigators reported tracking laundering attempts through Thorchain and Chainflip.\nFlow core developers proposed a rollback to a checkpoint prior to the exploit, which would erase all transactions submitted during a several-hour window and require users and infrastructure providers to resubmit activity. The Foundation stated the rollback would neutralize unauthorized minting and restore the ledger.\nAlex Smirnov, founder of cross-chain bridge deBridge, said he learned of the rollback decision after its public announcement. Smirnov warned that reverting the chain could create doubled balances for users who bridged assets out during the rollback window, while leaving others who bridged in facing losses with no clear reimbursement plan. He called on Flow validators to halt transaction validation until the Foundation clarified resolution of these cases and how custodians such as LayerZero, the primary USDC custodian on Flow, would handle affected transfers.\nFlowscan data showed the network stalled at a fixed block height for an extended period. The FLOW token declined following the exploit and rollback announcement, and some centralized exchanges temporarily suspended transactions, according to market data.\nDefiLlama data showed Flow’s total value locked dropped after the incident before partially rebounding within 24 hours.\nGabriel Shapiro, general counsel at Delphi Labs, stated the approach risked pushing losses onto bridges and issuers by creating unbacked assets. Smirnov argued that financial damage from a rollback could exceed the original exploit. Chain rollbacks remain rare in cryptocurrency networks due to concerns about reversing confirmed transactions and questions regarding decentralization.\nOn Dec. 29, Flow Foundation announced a revised remediation plan developed in consultation with bridge operators, exchanges, and validators. The updated approach abandoned a global rollback and instead focused on isolating and destroying fraudulently minted tokens while preserving legitimate user activity. Dapper Labs, which launched Flow, said it reviewed and supported the revised plan and that no Dapper Labs user balances or assets were impacted.\nUnder the new plan, the network would restart in phases, temporarily restricting accounts identified through forensic analysis as recipients of illicit tokens. Validators approved a software upgrade enabling the targeted remediation, and the network returned online in a read-only testing mode ahead of a phased restoration. The Foundation stated the majority of accounts would remain unaffected, with ongoing updates promised as normal operations gradually resume.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"symbols":[],"gpt_button":0,"need_auth":false,"code":"91000000","status":"200"}}}