{"id":5345,"date":"2026-01-07T06:22:48","date_gmt":"2026-01-07T06:22:48","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=5345"},"modified":"2026-01-07T06:22:48","modified_gmt":"2026-01-07T06:22:48","slug":"flow-details-3-9m-token-duplication-exploit-network-halted-within-hours","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=5345","title":{"rendered":"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours"},"content":{"rendered":"

<\/p>\n

\n
\n
\n
    \n
  • A protocol exploit in the Flow blockchain\u2019s Cadence runtime on December 27 allowed an attacker to create $3.9 million in counterfeit tokens.<\/span><\/li>\n
  • Network validators halted the chain within six hours and froze most fraudulent assets on exchanges before they could be liquidated.<\/span><\/li>\n
  • Flow has patched the vulnerability and destroyed the counterfeit tokens via a governance-approved recovery plan, with 99% of accounts remaining unaffected.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n

    The Flow blockchain contained a Dec. 27 protocol exploit that let an attacker create counterfeit tokens by abusing a flaw in the network\u2019s Cadence runtime, leading to about US$3.9 million (AU$5.9 million) in confirmed losses before the incident was stopped, the Flow Foundation said Tuesday in a technical post-mortem.<\/p>\n

    The Foundation said the attacker did not break into wallets or drain existing balances. Instead, the bug allowed some assets to be duplicated in a way that bypassed normal supply controls, effectively creating extra tokens that should not have existed.\u00a0<\/p>\n

    The risk was that counterfeit tokens could be sold into real markets before being detected.<\/p>\n

    Read more:<\/strong> Surviving 2026: Aussie Analysts on How to Filter Financial Noise and Master the Final Cycle<\/p>\n

    How the Flow Incident Went Down<\/h2>\n

    Crypto News Australia reported last week that Flow started rebuilding its network after the team realized an exploit on Saturday. It started with suspicious exchange activity tied to a large FLOW token deposit and rapid withdrawals.<\/p>\n

    Flow said validators coordinated a halt within six hours of the first malicious transaction and switched the network into a read-only mode to block \u201cexit paths\u201d while the team investigated. The Foundation said exchange partners also froze most of the counterfeit assets before they could be liquidated.\u00a0<\/p>\n

    Two days later, Flow restarted under an \u201cisolated recovery\u201d plan designed to keep valid transaction history intact while enabling a governance-approved process to recover and permanently destroy the counterfeit tokens.<\/p>\n

    Most accounts were not affected operationally. Flow said more than 99% of accounts retained full access during and after recovery, while a small number of accounts that interacted with the counterfeit tokens were temporarily restricted as a precaution.<\/p>\n

    The Foundation said it has patched the vulnerability, added stricter runtime checks, and expanded regression testing. It also said it is working with forensic partners and law enforcement, and plans to strengthen monitoring and bug-bounty programs as part of broader security hardening.<\/p>\n

    The flow token is down 53% since its launch in early December, currently trading at US$0.1012 (AU$0.15), as per CoinGecko data.<\/p>\n

    Related:<\/strong> Analysts Say Bitcoin Finds Its Footing as 2026 Opens, Eyes Turn to ETF Flow<\/p>\n<\/p><\/div>\n

    Cryptocurrency,Flow#Flow #Details #3.9M #Token #Duplication #Exploit #Network #Halted #Hours1767766968<\/p>\n","protected":false},"excerpt":{"rendered":"

    A protocol exploit in the Flow blockchain\u2019s Cadence runtime on December 27 allowed an attacker to create $3.9 million in counterfeit tokens. Network validators halted the chain within six hours and froze most fraudulent assets on exchanges before they could be liquidated. Flow has patched the vulnerability and destroyed the counterfeit tokens via a governance-approved<\/p>\n","protected":false},"author":1,"featured_media":5346,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[663,874,875,664,660,876,877,605,665],"class_list":{"0":"post-5345","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bitcoin","8":"tag-3-9m","9":"tag-details","10":"tag-duplication","11":"tag-exploit","12":"tag-flow","13":"tag-halted","14":"tag-hours","15":"tag-network","16":"tag-token"},"yoast_head":"\nFlow Details $3.9M Token Duplication Exploit, Network Halted Within Hours - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=5345\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours\" \/>\n<meta property=\"og:description\" content=\"A protocol exploit in the Flow blockchain\u2019s Cadence runtime on December 27 allowed an attacker to create $3.9 million in counterfeit tokens. Network validators halted the chain within six hours and froze most fraudulent assets on exchanges before they could be liquidated. Flow has patched the vulnerability and destroyed the counterfeit tokens via a governance-approved\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=5345\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-07T06:22:48+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=5345\",\"name\":\"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg\",\"datePublished\":\"2026-01-07T06:22:48+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=5345\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg\",\"width\":1920,\"height\":1051},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=5345#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto & Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=5345","og_locale":"en_US","og_type":"article","og_title":"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours","og_description":"A protocol exploit in the Flow blockchain\u2019s Cadence runtime on December 27 allowed an attacker to create $3.9 million in counterfeit tokens. Network validators halted the chain within six hours and froze most fraudulent assets on exchanges before they could be liquidated. Flow has patched the vulnerability and destroyed the counterfeit tokens via a governance-approved","og_url":"https:\/\/cryptonews.uk.com\/?p=5345","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-01-07T06:22:48+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=5345","url":"https:\/\/cryptonews.uk.com\/?p=5345","name":"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg","datePublished":"2026-01-07T06:22:48+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=5345#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=5345"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=5345#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/01\/crypto-flow-foundation.jpeg","width":1920,"height":1051},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=5345#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Flow Details $3.9M Token Duplication Exploit, Network Halted Within Hours"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto & Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/5345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5345"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/5345\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/5346"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}