aelf has restored access to its public nodes and several core services after malicious smart-contract activity (self-executing blockchain code) triggered a controlled recovery. The incident halted block production for approximately one week on the AELF MainChain and tDVV dAppChain. The Sept. 14 update listed access to both public nodes, aelfscan, FairyVault transfers, Awaken trading, Forest NFT browsing and the TMRW DAO staking interface. Checks on Sept. 15 found advancing block heights and reachable frontends, but did not verify user-submitted transactions or complete end-to-end transfers, trades or reward claims. Exchange deposits and withdrawals are returning on venue-specific schedules, with Bithumb, MEXC and INDODAX reporting different statuses. No network staking rewards were generated during the halt, and reopening the TMRW DAO interface does not create rewards for that period. Investigators identified 155 transactions linked to the malicious activity, five unique .NET assemblies capable of interacting with host systems and node-related keys and configuration, and unresolved risks involving node and infrastructure credentials. As of Aug. 26, aelf said it had found no unauthorized transfers of ordinary users' assets or exposure of ordinary-user wallet keys, while excluding unresolved credential exposure from that conclusion. The full post-incident review, technical appendix and final root-cause assessment remain unpublished pending remaining work, including an independent review, so restored services represent operational progress rather than a final security clearance.