Overview
- Blockaid disclosed on Monday that roughly 15.5 million WFLOW — a detected impact it values at about $9.3 million — were removed from More Markets’ mFlowWFLOW lending reserve.
- Blockaid linked the drain to a crafted use of Ankr’s bonded liquid staking token, ankrFLOW, inside More Markets’ Aave V3 efficiency mode (E Mode), which increased borrowing capacity for correlated assets beyond the protocol’s safeguards.
- The firm published the exploit transaction, a related contract deployment and a cluster of post‑exploit transfers, and forensic teams are tracing those on‑chain movements to confirm final losses and the funds’ destination.
- More Markets had not issued a public statement at the time of Blockaid’s disclosure and the evidence released so far does not allege that Ankr or the Flow network itself was compromised.
- The incident raises fresh questions about DeFi composability on Flow after a separate December 27, 2025 Cadence‑layer exploit duplicated tokens, and it could prompt tighter checks on using liquid staking tokens inside special lending modes and increased exchange caution for Flow assets.