Digital Asset
Intelligence
Security Incident

Ankr Smart Contract Vulnerability: $410.00K Reported Loss

·Historical incident record

Incident Overview

An attacker exploited a vulnerability in Ankr’s ankrFLOW liquid staking contract to mint approximately 8.6 million unbacked ankrFLOW tokens, then used them as collateral with More Markets’ E-mode to drain about 15.5 million WFLOW (~$410,000 at spot) from the lending reserve. The attacker realized roughly $246,000 after slippage. The Flow Foundation stated the root cause was in Ankr’s Solidity contract, not Flow EVM or More Markets.

Sources & References

Original incident referencehttps://x.com/flow_blockchain/status/2094506622429307061 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Ankr

    Attack methodPrivate Key Leakage
    Reported loss$ 5,000,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 14,000
  3. Incident date
    Target

    Aquifer

    Attack methodSmart Contract Vulnerability
    Reported loss$ 2,500,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000