Our team has implemented the necessary fixes, and we have conducted thorough testing to ensure that everything is functioning as expected.
If you encounter any further issues or have any questions, please don't hesitate to reach out to us.
Thank you for your cooperation and understanding throughout this process.
Our team has implemented the necessary fixes, and we have conducted thorough testing to ensure that everything is functioning as expected.
If you encounter any further issues or have any questions, please don't hesitate to reach out to us.
Thank you for your cooperation and understanding throughout this process.
After thorough testing and monitoring to ensure that everything is functioning as expected we can now close the crypto withdrawals incident.
If you encounter any further issues or have any questions, please don’t hesitate to reach out to us.
Thank you for again your cooperation and understanding throughout this process.
After thorough testing and monitoring to ensure that everything is functioning as expected we can now close the mobile app incident.
If you encounter any further issues or have any questions, please don’t hesitate to reach out to us.
Thank you for again your cooperation and understanding throughout this process.
After thorough testing and monitoring to ensure that everything is functioning as expected we can now close the onboarding incident. If you encounter any further issues or have any questions, please don't hesitate to reach out to us. Thank you for again your cooperation and understanding throughout this process.
The Flow security incident from December 27, 2025 has now been fully contained, remediated, and closed. Following a sophisticated exploit targeting a type-confusion vulnerability in the Cadence runtime, the network was halted, mitigations were deployed, and all systems have been restored safely. Key outcomes:
The vulnerability has been patched, with extensive security hardening and updated validation logic now live on mainnet.
Validators and ecosystem partners executed a coordinated response that prevented further counterfeit asset movement and preserved legitimate state.
The vast majority of counterfeit tokens were contained on-chain or frozen by exchanges; ongoing recovery and destruction of remaining counterfeit assets continues under governance authorization.
Flow’s Cadence and EVM environments are now fully operational, with normal transaction processing resumed.
No user action is required. With all mitigation measures in place and continuous monitoring ongoing, this incident is officially closed. For full technical details, see the post-mortem: https://flow.com/post/dec-27-technical-post-mortem Thank you for your patience and understanding while we investigated this issue.