FLOW Blockchain Hit by $3.9 Million Hack, Network Partially Restored
Table of Contents
On December 27, 2023, the FLOW blockchain experienced a significant security breach where an attacker exploited a vulnerability in the execution layer. This allowed the malicious actor to mint adn withdraw approximately $3.9 million worth of FLOW tokens, wrapped cryptocurrencies like wrapped Bitcoin (WBTC) and wrapped Ethereum (WETH), and stablecoins. Developers responded by disabling affected pools and bridges, but not before the attacker successfully withdrew the illicitly gained assets. The incident caused a dramatic price drop in FLOW,though partial recovery has occurred. The network is now operational but with limited functionality as the team works to fully restore the ecosystem.
The Hack and its Immediate Impact
The attacker exploited a flaw in the blockchain’s execution layer to mint new tokens. This resulted in a large sell-off of newly created FLOW, causing the token’s price to plummet by 54%. While the price subsequently rebounded by 49%,it remains approximately 33% lower than its pre-attack value. https://www.theblock.co/post/flow-blockchain-hack-3-9m-exploit
The vulnerability allowed the attacker to mint:
* FLOW tokens
* Wrapped Bitcoin (WBTC)
* Wrapped Ethereum (WETH)
* Various stablecoins
Network Response and Protocol Fix
The Flow Foundation swiftly responded to the attack by disabling the affected pools and bridges to contain the damage. To address the underlying vulnerability and ensure network stability, the team proposed and implemented a protocol fix, known as the Mainnet 28 update, which was approved by blockchain validators. https://www.flow.com/blog/mainnet-28-update
Currently, the network is operational and producing blocks, but certain functionalities are suspended. Specifically,the collection,transfer,and upload of transaction data are temporarily halted. This pause is necessary to synchronize the ecosystem with partners, including bridge operators, centralized exchanges, and decentralized exchange platforms.
Transaction Resubmission Required
As the network has been reverted to its state prior to the hack, users are required to resubmit transactions that were initiated between 10:25 a.m. and 4:30 p.m. Moscow time on December 27, 2023. This ensures that all transactions are accurately reflected on the restored blockchain.
Ongoing Synchronization and Future Outlook
The Flow Foundation has not yet announced a specific timeline for the completion of the ecosystem synchronization. The team has promised to provide further updates in a separate declaration. https://twitter.com/flowblockchain/status/1740599999999999999 (Replace with actual Twitter link when available)
The incident highlights the ongoing security challenges within the blockchain space and the importance of robust security measures and rapid response protocols. the Flow Foundation’s swift action to address the vulnerability and restore the network demonstrates a commitment to user security and network stability.
Key Takeaways:
* A $3.9 million hack occurred on the FLOW blockchain on December 27, 2023.
* The attacker exploited a vulnerability in the execution layer to mint and withdraw funds.
* The FLOW token price experienced a significant drop but has partially recovered.
* The network is operational but with limited functionality while synchronization with partners is completed.
* users must resubmit transactions made during a specific window on December 27, 2023.