In yet another concerning development for the web3 and cryptocurrency sector, the Flow Foundation recently revealed this past Saturday that it is probing a suspected security breach impacting its primary Layer 1 blockchain. This latest disclosure has led various South Korean cryptocurrency platforms to effectively suspend all transfers involving the FLOW token, exacerbating a rapid market downturn that saw the crypto-asset‘s value drop significantly.
The foundation shared the news via a post on X, stating,
“We are examining a possible security event on the Flow network. Our technical staff is working closely with ecosystem collaborators to address the problem. Expect confirmed updates shortly.”
This measured response highlights the urgency as teams scramble to contain the fallout.
The issue came to light when blockchain investigator Wazz highlighted suspicious activity soon after an abrupt price decline.
Wazz’s preliminary assessment suggests that roughly $4 million in assets were illicitly removed.
Delving deeper, the analyst noted that the perpetrator employed a digital wallet established about half a year prior to generate vast quantities of wrapped FLOW (WFLOW) tokens.
This was facilitated through a TransparentUpgradeableProxy smart contract mechanism, pointing more toward a breach of private keys rather than a flaw in the contract’s code itself.
Echoing these findings, cybersecurity specialist Taylor Monahan provided insights on this development.
She described a scenario where the network’s defenses may have been circumvented, enabling the unauthorized creation of the native FLOW token alongside bridged assets such as wrapped Bitcoin (WBTC), wrapped Ethereum (WETH), and various stablecoins.
Monahan estimated the total damage at approximately $3.9 million, adding that all associated liquidity pools and cross-chain bridges have been temporarily deactivated to prevent further losses.
The market reaction was swift and severe.
Available data from CoinMarketCap and CoinGecko now indicates that FLOW’s value tumbled by more than 40% within hours of the revelation.
By Saturday afternoon, the token hovered around $0.10, a stark contrast to its earlier position near $0.17.
This volatility was accompanied by a massive spike in trading activity, with volumes exceeding $170 million over the preceding 24 hours—a clear sign of investor panic and opportunistic trading.
This incident underscores ongoing vulnerabilities in blockchain infrastructures, even for established networks like Flow, which currently powers various types of decentralized applications in gaming, NFTs, and entertainment.
While the foundation has not yet detailed the exact nature of the compromise, the involvement of wrapped tokens and bridges raises questions about the security of interoperability features in multi-chain environments.
As the investigation progresses, stakeholders are now watching closely for any potential resolutions that could restore confidence.
In the meantime, the halt on South Korean exchanges—key hubs for Asian crypto trading—may limit liquidity and prolong recovery efforts. Experts advise users to monitor official channels and avoid transacting until clearances are issued.
The broader implications for the crypto industry are notable, as such events often prompt regulatory scrutiny and calls for enhanced security protocols.
Flow’s team has a track record of resilience, but rebuilding trust will require more transparency and swift action.
With the token‘s market cap already battered, the coming days will be critical in determining whether this is a temporary setback or a longer-term challenge.