Flow Security Incident Review: Type Confusion Vulnerability in Cadence Identified as Key Factor
BlockBeats News, January 7th, Folw released an attack event retrospective report, stating that the attacker exploited a Flow Network vulnerability to mint fake tokens, stealing approximately $3.9 million through a bridging attack. This attack did not access or leak any existing user balances. The attack duplicated assets but did not touch legitimately held assets, with the majority of the fake assets either stored on-chain before liquidation or frozen by exchange partners. Network validators have approved a decentralized governance action authorizing the permanent destruction of all fake assets. The network resumed operation on December 29th, is currently running smoothly, and all transaction history has been preserved.
The attacker sequentially deployed over 40 malicious smart contracts, leveraging a three-stage attack chain: 1) bypassing attachment import verification; 2) circumventing defense checks of built-in types; 3) exploiting a contract initializer semantic vulnerability. The root cause was a type confusion vulnerability in the Cadence runtime (v1.8.8), which has now been patched (v1.8.9 and higher versions). This vulnerability allowed the attacker to disguise protected assets (which should not be duplicable) as standard data structures (which are duplicable), bypassing runtime security checks and enabling token minting.
In addition to moving assets out of Flow, the attacker also attempted to deposit fake FLOW on several centralized exchanges, but due to the abnormal transaction volume and internal anti-money laundering protocols, multiple exchanges froze the deposit upon receipt. Approximately 50% of the fake FLOW deposits have been returned and destroyed by cooperating exchanges (such as OKX, Gate, MEXC), while the foundation continues to actively coordinate with other exchange platforms.
You may also like

Key Market Information Discrepancy on February 11th – A Must-See! | Alpha Morning Report

February 11 Market Key Intelligence, How Much Did You Miss?

Analyzing the Impact of Technological Trends in 2026
Key Takeaways The rapid evolution of technology continues to reshape industries, creating both opportunities and challenges. Understanding the…

Navigating Crypto Content Challenges in a Digital World
Key Takeaways Effective content management in the crypto industry involves addressing usage limits and optimizing resources. Staying informed…

Cryptocurrency Exchanges: Current Trends and Future Outlook
Key Takeaways The cryptocurrency exchange market continues to expand, influenced by various global economic trends. User experience and…

Untitled
I’m sorry, but I can’t generate a rewritten article without access to specific content for rewriting. If you…

Crypto Market Dynamics: An In-depth Overview
Market fluctuations provide insights into the volatility and dynamics of cryptocurrency trading. Key market participants play significant roles…

Predicting High-Frequency Trading Strategies in the Market, How to Ensure a Guaranteed $100,000 Profit?

This might be the average person's final opportunity to get ahead of AI

A Day Gathering Wall Street's Old Money: LayerZero's "Mainnet Transition" Narrative

Full Text of CZ's New Interview: From Ordinary Programmer to Richest Chinese, Involvement with FTX, Going to Jail, Doing Charity, Publishing a Book, What is CZ Focus on Now?

Mr. Beast is officially entering the world of finance, the Gen Z's new banker

SBF Appeals from Prison, Files 35-Page Motion Accusing Trial of "Collusion"

Robinhood 2025 Report Card: Earned $45 Billion, Why Did the Stock Price Drop by Half?

$1M+ AI Trading Finals: Hubble AI & WEEX Spotlight the Future of Crypto Trading
The WEEX AI Trading Hackathon Finals are now live, featuring real-time PnL leaderboards, daily rankings, and in-depth AMA sessions. Explore how top AI trading strategies perform under real market volatility and follow the competition as it unfolds.

WEEX Alpha Awakens Final Round Has Officially Begun
Day 1 of the WEEX AI Trading Hackathon Final Round is now live! Watch top algorithmic trading strategies compete with real capital. Follow the action from Feb 3–16, 2026, with $880K+ in prizes. Tune in live now. #AITrading #TradingHackathon

WLFI Team Meeting, Ally Meeting, Seaside Villa Cryptocurrency Business Kickoff

OpenClaw Hackathon, What are some projects worth checking out
Key Market Information Discrepancy on February 11th – A Must-See! | Alpha Morning Report
February 11 Market Key Intelligence, How Much Did You Miss?
Analyzing the Impact of Technological Trends in 2026
Key Takeaways The rapid evolution of technology continues to reshape industries, creating both opportunities and challenges. Understanding the…
Navigating Crypto Content Challenges in a Digital World
Key Takeaways Effective content management in the crypto industry involves addressing usage limits and optimizing resources. Staying informed…
Cryptocurrency Exchanges: Current Trends and Future Outlook
Key Takeaways The cryptocurrency exchange market continues to expand, influenced by various global economic trends. User experience and…
Untitled
I’m sorry, but I can’t generate a rewritten article without access to specific content for rewriting. If you…