More Markets suffers $9.3M Wrapped Flow hack

An attacker extracted roughly $9.3 million in Wrapped Flow from a More Markets lending reserve on Flow EVM by combining Ankr's liquid staking token with efficiency mode to exceed normal borrowing limits, according to Web3 security platform Blockaid.

The exploit resulted in the loss of approximately 15.5 million WFLOW tokens from the mFlowWFLOW reserve, Blockaid reported Monday on X, citing on-chain records.

The attacker deployed Ankr Staked FLOW—a liquid staking derivative—in conjunction with E-mode, an Aave V3 mechanism that amplifies borrowing capacity when collateral and borrowed assets are expected to maintain correlated pricing, such as a staking token and its base asset.

August losses from digital-asset exploits now stand at $139.7 million, ranking as 2026's third-worst month by stolen value but well below July's $254 million, DefiLlama records show.

A day earlier, Cronos suspended network operations following an alleged $75 million breach of Tectonic, a DeFi lending platform.

More Markets had issued no public statement confirming the incident or detailing any user impact at publication time. Cointelegraph reached out to both Blockaid and More Markets but received no reply.