Flow's execution layer was exploited on December 27, allowing the attacker to mint FLOW tokens and bridge assets (WBTC, WETH, and stablecoins) via Celer and Debridge for $3.9M. The exploit was likely enabled by a compromised privileged admin key.

The Flow Foundation announced that an attacker exploited a vulnerability in the Flow execution layer, transferring approximately $3.9 million in assets off the network before validators were able to coordinate and halt operations. The incident did not affect existing user balances, and all user deposits remain intact.