Attackers drain 15.5M WFLOW from More Markets in suspected $9.3M Flow exploit

The Blockaid security firm has reported an exploit estimated to have drained roughly $9.3 million from More Markets’ WFLOW lending reserve in the early hours of August 31, 2026.

The Flow EVM lending protocol built by More Labs did not immediately confirm the loss in its response to the reports, writing that it is “currently investigating a claim that MORE Markets was exploited”

More Markets has not yet confirmed the incident or loss, and a full post-mortem is not available as of this report. Blockaid also stopped short of fingering Ankr or the Flow blockchain as compromised.

However, the security firm estimated that the attack could have come from one of two key components:

An alternative theory being popularized by Sprunky , an on-chain analyst, is that this is a cross-protocol liquidity extraction that runs deeper than a simple “Ankr LST plus E-mode” bug.

However, the episode lands a fresh hit during a rough stretch for DeFi. Cryptopolitan reported that Moonwell lost as much as $9 million in late August to a MAMO price-manipulation attack on its Base market, its third security incident in nine months.

Days later, Solana neobank Avici was drained of $500,000 and pledged full refunds, while Ethereum lending protocol Ajna lost roughly $775,000 to liquidation accounting manipulation.

If you're reading this, you’re already ahead. Stay there with our .

Blockaid estimated roughly $9.3 million, drawn from 15.5 million WFLOW emptied from the mFlowWFLOW reserve, but it called that a "detector impact" and said the final loss is not yet confirmed while investigators trace the funds.

According to Blockaid, the attacker combined an Ankr bonded liquid staking token with More Markets' E-Mode mechanism to drain the WFLOW lending reserve on Flow EVM. Blockaid did not say Ankr or the Flow blockchain itself was compromised.

No. In an August 31 post on X, More Markets said it was investigating a claim that it had been exploited and would its findings, without confirming a loss amount or a fix.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

Hannah is a writer and editor with nearly a decade of blog writing and event reporting experience in the crypto space. At Cryptopolitan, Hannah contributes to the news page, reporting and analyzing the latest developments in DeFi, RWA, crypto regulation, AI and frontier tech industries. She graduated from Arcadia university with a degree in Business Administration.