An attacker extracted roughly $9.3 million in Wrapped Flow from a More Markets lending reserve on Flow EVM by combining Ankr's liquid staking token with efficiency mode to exceed normal borrowing limits, according to Web3 security platform Blockaid.
The exploit resulted in the loss of approximately 15.5 million WFLOW tokens from the mFlowWFLOW reserve, Blockaid reported Monday on X, citing on-chain records.
The attacker deployed Ankr Staked FLOW—a liquid staking derivative—in conjunction with E-mode, an Aave V3 mechanism that amplifies borrowing capacity when collateral and borrowed assets are expected to maintain correlated pricing, such as a staking token and its base asset.
August losses from digital-asset exploits now stand at $139.7 million, ranking as 2026's third-worst month by stolen value but well below July's $254 million, DefiLlama records show.
A day earlier, Cronos suspended network operations following an alleged $75 million breach of Tectonic, a DeFi lending platform.
More Markets had issued no public statement confirming the incident or detailing any user impact at publication time. Cointelegraph reached out to both Blockaid and More Markets but received no reply.
Hot Stories
- News Binance says it reserved $6.34B after the hack
- Investigations Chainalysis uses AI to track $387M stolen from Bitget
- News Binance reports $6.3B security incident
- Investigations Cysic Bridge Hacker Routed $744K to Tornado Cash After 10% Bounty
- Investigations Drift exploit hackers moved $109M ETH to Tornado Cash mixer
- News Crypto incidents cost $1.18B in Q3 2026, mostly supplier flaws
- Investigations CryptoBilis Hardware Wallet Theft Estimated at $93M to $94.5M
- Investigations Virginia man forfeits $101M in bitcoin after 40-year sentence
- Articles Crypto Stolen? What to Do Next
- Investigations Zano halted 36.9M fake tokens via chain rollback after exploit