An attacker extracted roughly $9.3 million in Wrapped Flow from a More Markets lending reserve on Flow EVM by combining Ankr's liquid staking token with efficiency mode to exceed normal borrowing limits, according to Web3 security platform Blockaid.
The exploit resulted in the loss of approximately 15.5 million WFLOW tokens from the mFlowWFLOW reserve, Blockaid reported Monday on X, citing on-chain records.
The attacker deployed Ankr Staked FLOW—a liquid staking derivative—in conjunction with E-mode, an Aave V3 mechanism that amplifies borrowing capacity when collateral and borrowed assets are expected to maintain correlated pricing, such as a staking token and its base asset.
August losses from digital-asset exploits now stand at $139.7 million, ranking as 2026's third-worst month by stolen value but well below July's $254 million, DefiLlama records show.
A day earlier, Cronos suspended network operations following an alleged $75 million breach of Tectonic, a DeFi lending platform.
More Markets had issued no public statement confirming the incident or detailing any user impact at publication time. Cointelegraph reached out to both Blockaid and More Markets but received no reply.
Hot Stories
- Investigations Zano halted 36.9M fake tokens via chain rollback after exploit
- Fraud Schemes Third-Party Adapter Breach Drains $305K from Safe Wallets
- Investigations OFAC sanctions 10 for $40M ATM jackpotting using crypto
- Fraud Schemes Fake GIWA bridge steals $2M in Ether from DYORSWAP users
- Articles How Open-Weight AI Helps Hackers Find Code Vulnerabilities
- Investigations iOS app FomoPeek stole $579K in USDT via kernel exploits
- News Bitget confirms $351.6 million hack
- Investigations How AI Is Changing Attacks on Crypto Services
- News Bitget: reports of a possible $170M hack
- Investigations White-hat hackers exploit Liquid Network flaw to steal $320M BTC