YFarmX

Tools Crypto Exploit Tracker exploit-0079

Exploit record

Flow Network

Loss
$4M
Attack vector
Other
Chain
Flow
Sector
Execution Layer

What happened

On December 27, 2025, an attacker exploited a flaw in Flow's execution layer and moved roughly $3.9M off-network through bridges before validators coordinated a halt.

Flow stressed that existing user balances were not touched, a real point in its favour. The vulnerability appears to have been in the exit/execution path rather than a direct user-account drain. That said, once assets are already riding bridges to Ethereum and the attacker is sending value through THORChain and Chainflip, the distinction becomes more architectural than comforting.

On-chain references

  • Exploiter0x2e7C4b71397f10c93dC0C2ba6f8f179a47F994e1

One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026