Zach Anderson
Mar 06, 2026 08:52
Circulation Community resolves December 2025 exploit that created counterfeit tokens and induced $3.9M in losses. FLOW token rebounds 16% as protocol deploys repair.
Circulation Community has formally resolved the December 2025 safety incident that allowed an attacker to create counterfeit tokens, leading to roughly $3.9 million in confirmed losses throughout the ecosystem.
The FLOW token has rebounded sharply, buying and selling at $0.10 with a 16% achieve over 24 hours as of January 6, 2026. The restoration follows a brutal 40% crash that pushed costs to $0.075 in early January after the exploit grew to become public.
What Really Occurred
On December 27, 2025, an attacker found a flaw in Circulation’s Cadence runtime—the sensible contract execution layer—that allowed token duplication slightly than correct minting. This bypassed the community’s provide controls totally.
The stolen funds moved shortly off-network by means of a number of cross-chain bridges together with Celer, Debridge, Relay, and Stargate. Binance froze hacker-linked funds shortly after the exploit, limiting among the injury.
This is what issues for holders: the Circulation Basis confirmed that no present consumer account balances had been compromised. The attacker created counterfeit belongings from nothing slightly than draining authentic wallets.
The Response Timeline
Validators coordinated a community halt inside six hours of detecting malicious exercise, placing Circulation into read-only mode. That is quicker than most Layer-1 responses to comparable incidents, although the two-day downtime nonetheless induced issues.
NFT lending platforms felt the ache notably exhausting—mortgage settlements could not course of through the freeze, creating liquidation dangers for some customers.
Operations resumed after validators executed a governance-approved course of to completely destroy the counterfeit belongings and deploy Mainnet 28, the protocol repair addressing the Cadence vulnerability.
Market Affect
FLOW’s present market cap sits at $142.64 million, nonetheless properly under pre-exploit ranges. The token’s restoration trajectory will rely closely on whether or not any extra vulnerabilities floor throughout autopsy audits.
The incident provides Circulation to a rising checklist of protocols hit by runtime-level exploits in late 2025, elevating broader questions on Cadence safety versus extra battle-tested sensible contract languages.
For merchants watching the FLOW restoration, the subsequent catalyst is probably going the discharge of a full technical autopsy, anticipated within the coming weeks in response to Circulation Basis communications.
Picture supply: Shutterstock