---
title: "Flow released its technical recap report on the security incident on December 27, 2025."
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/271679940.md"
description: "On December 27, 2025, the Flow network experienced a security incident due to a vulnerability in the Cadence virtual machine, leading to the illegal issuance of approximately 87.96 billion FLOW tokens and a loss of about $3.9 million. Attackers exploited a complex vulnerability chain, but timely actions by validators and exchanges helped freeze 98.7% of the illicit assets. The network was restored on December 29 with an \"Isolation Recovery Plan\" and comprehensive patches were implemented to enhance security."
datetime: "2026-01-06T16:46:00.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/271679940.md)
  - [en](https://longbridge.com/en/news/271679940.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/271679940.md)
---

# Flow released its technical recap report on the security incident on December 27, 2025.

On December 27, 2025, the Flow network suffered an attack targeting the Cadence virtual machine type obfuscation vulnerability, resulting in the illegal issuance of tokens. Attackers exploited a complex "three-part vulnerability chain" to bypass resource linearity guarantees, disguising resource objects as structures for duplication. The incident caused approximately $3.9 million in actual economic losses, with funds flowing out through cross-chain bridges such as Celer and deBridge. According to Flow monitoring, the attackers created a total of 87.96 billion FLOW tokens and various other tokens, of which 1.094 billion FLOW tokens were transferred to centralized exchanges. Thanks to the validators' timely shutdown and cooperation with OKX, Gate.io, and MEXC, approximately 98.7% of the illicit assets were frozen on-chain or on exchanges, and approximately 484 million FLOW tokens were destroyed. The network was restored on December 29 through the "Isolation Recovery Plan," and comprehensive patches covering parameter validation, runtime checks, and contract deployment logic have been deployed.

## Related News & Research

- [EDB Delivers "Intelligence per Watt" Paradigm to Slash Token Consumption and Cut Data Center Emissions by up to 87%](https://longbridge.com/en/news/283673896.md)
- [RaveDAO team denies role in RAVE token pump as Binance, Bitget open investigations](https://longbridge.com/en/news/283233104.md)
- [The Claude-lash is here: Opus 4.7 is burning through tokens — and some people's patience](https://longbridge.com/en/news/283191690.md)
- [Arkham - UX Shortcuts - 18 April 2026](https://longbridge.com/en/news/283234327.md)
- [Crypto Market - RWA DeFi & PayFi Summit - 21 April 2026](https://longbridge.com/en/news/283230221.md)