More Markets drained of 15.5 million WFLOW from mFlowWFLOW reserve in Flow EVM exploit

  • More Markets faces an estimated $9.3 million WFLOW reserve exploit
  • Blockaid cites ankrFLOW collateral or E-Mode as possible vectors
  • More Markets says it is investigating and has not confirmed losses

Non-custodial lending protocol More Markets on Flow EVM, built by More Labs on Aave V3 architecture, was hit in an Aug. 31 exploit that drained about 15.5 million Wrapped Flow (WFLOW) from the mFlowWFLOW reserve, with security firm Blockaid estimating detected impact near $9.3 million while saying final losses were still unconfirmed. More Markets has not confirmed any loss, stating it is reviewing the claim and will publish findings when the review is complete. Blockaid said an attacker combined Ankr Staked FLOW (ankrFLOW), a liquid staking token, with the protocol’s Efficient Mode setting to overborrow and empty the reserve, published related transactions, and did not allege that Ankr itself was compromised; it remains unclear whether the issue stemmed from More Markets’ implementation, Ankr asset handling, pricing assumptions, or their interaction. FLOW fell about 8% over 24 hours to trade near $0.026, while value locked in More Markets dropped to roughly $3.6 million amid a broader downturn that pulled total crypto market capitalization down about 3%. The application-layer incident on Flow EVM is distinct from Flow’s December 2025 Cadence breach, which enabled fungible-token duplication and about $3.9 million in extractions before an isolated recovery. The episode adds to a harsh stretch for lending protocols, including Cronos halting after an estimated $75 million Tectonic exploit on Aug. 30, Moonwell’s estimated $8.7 million loss, and DefiLlama’s tally of August exploit losses near $139.7 million—the year’s third-largest month so far, though still below July’s $254 million.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.