📢 Flow Ecosystem Update

TL;DR: Flow hit $112M TVL, Disney Pinnacle went global, NFL ALL DAY kicked off the season strong, and Forte is coming Oct 22.

Here’s a deeper look at what’s been happening across the ecosystem:

• Flow TVL hit $112M, a new all-time high — that’s 6x growth in less than a year.
• Disney Pinnacle announced its Global Launch, after a year of sold-out drops and record-setting marketplace sales.
• NFL ALL DAY kicked off the new season with new features, autographed Moments, and in-game activations.
• KittyPunch set a new record for trading volume and teased $KUSD, their upcoming stablecoin.
• Beezie just had its best month ever, pushing the conversation on tokenized collectibles forward.
• Flunks launched Flappy Flunks, with the community playing 15k+ rounds in the first tournament.
• ReWTF, Flow’s new builder activation, is live — helping developers get started and grow faster.
• NBA Top Shot fans met NBA Champ + Gold Medalist Derrick White at an exclusive event.
• Doodlifts new video shows off how to off-ramp from Flow directly to PayPal or Venmo.

Flow continues to prove itself as the home for builders, brands, and fans.

Make sure to follow Flow on Twitter and Linkedin to stay up to date with everything going across the network!

Forte is now live on Flow testnet
Forte is the Flow network upgrade that brings composability and automation natively to Flow. Two new primitives, Actions and Workflows, let developers compose reusable, protocol-agnostic workflows with onchain time-based triggers. Forte lets builders get an edge with new features, like standardized DeFi actions, scheduled transactions, and onchain workflows.

Flow is the number 1 choice for builders at hackathons all over the world. Forte Hacks provides an opportunity for those developers and builders to experiment with the latest upgrade to the network and build the next killer app.

Forte Hacks is Open for Registration!
This October-long, global hackathon invites hackers, creators, and Web3 developers to push the boundaries of smart contract automation, DeFi primitives, and user-centric killer applications to win a share of $250,000 in bounties and prizes. Supported by a range of partners, like Dune, Quicknode, Moonpay, Thirdweb, Privy, Crossmint and more, the Forte Hacks hackathon has multiple core tracks - including exclusive bounties for building with these partner applications. The Hackathon starts on October 1st.

The tracks:
• Best Killer App on Flow
• Best Vibe Coded Project
• Best Use of Flow Workflows
• Best Use of Flow DeFi Actions

🌐 Register: https://link.flow.com/ForteHacksHackathon
📖 Read More: https://link.flow.com/ForteHacksBlog

Flow Ecosystem Updates
Flow's Forte upgrade is now live on testnet, kicking off the Forte Hacks global hackathon with $250,000 in prizes. The network continues to see explosive growth, with a 600%+ increase in DeFi TVL, a 1000% increase in smart contracts deployed, and over 1 million new active accounts in the last 12 months.

- Forte is live on testnet! To celebrate, Flow announced Forte Hacks, a global hackathon with $250,000 in prizes & perks.
- Beezie successfully closed their fundraising round and it was oversubscribed. A huge win for the team that moved from another chain and took a bet on Flow.
- In less than a year, the total volume locked on Flow has grown by more than 6x, from $18M USD to $110M+ .
- Dete sat down to talk about the vision, big picture, and paradigm shift of Flow.
- NFL ALL DAY just announced a partnership with Ticketmaster. Fans at select games this season get a free Moment from the exact game they attended.
- NFL ALL DAY continued to make noise, as Geoff Wilson highlighted a Tom Brady moment as the “Moment of the Week”
- Disney Pinnacle announced its Global Launch at the massive D23 Disney Event.
- Beluga Crypto, a top DeFi publication, wrote an in-depth analysis on $DPIN.
- MFL, a football manager game on Flow, has seen record growth in recent quarters. Now reaching $5M+ in total revenue and consistently selling out drops.
- CryptoKitties is doing a massive airdrop for Flow community rewards keys. Bop ninja kitties and earn keys!
- Flow published a blog on the implementation of Proof of Possession.

With all this growth and momentum in the ecosystem, the Flow Foundation is hiring to keep the team growing as quickly as the ecosystem!

Forte Hacks

Time is running out to sign up!

Forte Hacks begins October 1st with $250,000 in prizes and partner bounties from Dune, Quicknode, Moonpay, Thirdweb, Privy, Crossmint, and more.

This hackathon celebrates the Forte upgrade, which brings:
• Actions → standardized building blocks for DeFi
• Workflows → compose complex operations in one atomic transaction
• Scheduled Transactions → run code later without a backend

🏁
Developers, guarantee your spot today, register now.
📖 Learn more: https://link.flow.com/ForteHacksBlog

Flow Ecosystem Updates
- Forte is live on testnet! To celebrate, Flow announced Forte Hacks, a global hackathon with $250,000 in prizes & perks. Flow has been the #1 choice for builders at every major hackathon in 2025 and now it's time to take it to the next level.
- The Flow team was on the ground in New Delhi. Ali and Felipe have been hosting developer side events like the Builder Sabha. The rooms are packed and builders are excited to go with the flow at ETHGlobal New Delhi.
- Punchswap by Kittypunch just crossed $100M in total swap volume, a huge milestone for the network.
- The DeFi protocol token and memecoin pair $FVIX/$FROTH nearly doubled in price over the weekend, making the Punchswap protocol token on of the largest tokens on the network. Kittypunch is also encouraging Forte Hacks builders to compose ontop of $FROTH.
- Flow partnered with Live Stakes to provide builder coverage at ETHGlobal New Delhi!
- Fresh on the heels of their oversubscribed funding round, Beezie announced a major partnership with Opensea. They are tokenizing $100,000 in RWAs on Flow for the OpenSea Rewards Pool.
- Flow CLI just got a major upgrade, now including DeFi actions and scheduled transactions.
- Builders like Noah are diving into the Forte upgrade, showing how developers can build things like fully onchain automated subscriptions 🤯
- Cryptokitties airdropped 1 Million Flow Rewards keys to players who bopped 15,000 ninja kitties in on week!
- Several news outlets including Apple News reported on the Forte upgrade and what's going on in the Flow ecosystem.
- Flow was the #1 trending live stream on Binance this weekend, With Ali and Doodlifts sharing more about all the exciting things happening on Flow.
- NBA Top Shot's birthday was this week! It's the 5 year anniversary since public launch, with new drops, new features, community celebrations, and more.

Something epic is coming! December 2, mark the date and help us spread the news. https://x.com/flow_blockchain/status/1990797147789541400?s=20

As the premier consumer L1 network, Flow has proven that incubating killer apps is as crucial as maintaining robust open infrastructure. With apps from the NBA, NFL, and Disney, Flow onboarded over 15 million consumers and minted over 200 million assets, setting the standard for seamless onboarding.

Now, Flow is ready for its next chapter. Combining mature DeFi infrastructure with deep consumer expertise, Flow is ready to spearhead the future of consumer finance.

With three major announcements today:

1️⃣ Flow Credit Markets (FCM)

2️⃣ Peak Money, by Dapper Labs.

3️⃣ Updated Flow tokenomics


📜 Read the full vision here: https://x.com/roham/status/1995855671380598981?s=20

Flow vs Monad TPS Showdown
https://x.com/DiamondNFL/status/1998464015585128592?s=20

This is the verified update from the Flow Foundation.

INCIDENT CONFIRMED

On December 27, 2025, an attacker exploited a vulnerability in Flow's execution layer and moved approximately $3.9M in assets off-network before validators executed a coordinated halt.

Critically, this exploit did not access existing user balances. All user deposits remain intact.

The Foundation's security team has mapped the exit path. Current status:

CONFIRMED FUNDS EXITED TO DATE: ~$3.9M
→ Primarily routed through bridges (Celer, Debridge, Relay, Stargate)
→ Attacker wallet identified and flagged
→ Active laundering via Thorchain/Chainflip being tracked in real-time
→ Freeze requests submitted to Circle, Tether, and major exchanges
→ Forensic analysis ongoing

CONTAINMENT: Complete
→ Network halt severed all exit paths
→ No further unauthorized activity possible
→ Remediation in progress

The confirmed funds exited represent a manageable amount that does not
threaten network solvency or user funds. The immediate priority is
remediation and safe restart.

RESTART TIMELINE

The protocol fix has been developed and is entering final validation.

→ Target restart: Within 4-6 hours, pending successful testnet validation
→ Next status update: Within 2 hours
→ Full technical post-mortem: Within 72 hours

The network will not be restarted until the fix has been fully validated.
The Foundation will provide updates every 2 hours until restart is complete.

Find Labs is publishing the Foundation's forensic data below, including transaction hashes and the attacker's Ethereum wallet.

The Foundation thanks the community for its patience during the investigation.
https://x.com/findlabs/status/2005021008156078274?s=20

UPDATE: FLOW NETWORK IS LIVE

CURRENT STATUS:

✅ Cadence environment: Operational
✅ Network producing blocks and processing transactions
✅ Over 99.9% of accounts: Full functionality restored
🔄 EVM environment: Temporarily restricted (read-only mode)
🔄 Suspected impacted accounts: Temporarily restricted pending remediation

Please see the full announcement here:

https://x.com/flow_blockchain/status/2005655108558991606?s=20

UPDATE: CADENCE CLEANUP INITIATED

Flow Foundation has begun to unrestrict affected accounts and will begin fraudulent token remediation today.

CURRENT STATUS:
✅ Cadence environment: Operational and processing transactions
✅ Phase 2 cleanup: In progress
✅ Account restoration: Temporarily restricted accounts have begun to be unrestricted, with more coming throughout the day
🔄 Fraudulent token remediation: Commencing today via transparent and auditable on-chain transactions
⏳ EVM environment: Temporarily restricted (read-only mode, Forensic analysis ongoing)

Read the full update here:

https://x.com/flow_blockchain/status/2006024885727093009?s=20

Flow Network Update: Flow EVM Back Online

Flow is now fully operational. 

The network is secure and processing transactions across both the Cadence and EVM execution environments.

This milestone marks the completion of one of the most complex recovery operations in blockchain history. What was initially projected as a sequential, multi-day process has been executed in parallel, restoring both Cadence and EVM functionality while maintaining surgical precision in removing fraudulent assets and preserving legitimate transaction history.

- Bridges and DEXes (KittyPunch, IncrementFi) are resuming normal operations today.

- Kraken has already returned to normal operations, and other cooperative centralized exchanges will be resuming services soon

A comprehensive technical post-mortem detailing the complete attack vector, forensic analysis, and remediation approach, will be published within 48 hours.

Thank you to the entire Flow community for your patience, support, and understanding.

Read the official update: https://x.com/flow_blockchain/status/2007125204603150660?s=46&t=t9o3dswTynPR1dy0Xsb-7Q

Flow Network Exploit Post-mortem

On December 27, 2025, an attacker exploited a vulnerability in the Flow network to counterfeit tokens, extracting approximately $3.9 million USD across bridges. No existing user balances were accessed or compromised. The attack duplicated assets but did not touch legitimate holdings, with the vast majority of counterfeit assets being contained onchain or frozen by exchange partners before they could be liquidated. Network validators have ratified a decentralized governance action authorizing the permanent destruction of 100% of counterfeit assets. The network resumed operations on December 29th and is operating as expected​ with full transaction history preserved.

The attack demonstrated significant technical sophistication. The attacker deployed over 40 malicious smart contracts in a coordinated sequence, exploiting a three-part attack chain. The root cause was a type confusion vulnerability in the Cadence runtime (v1.8.8), now patched (v1.8.9 and later). The flaw allowed the attacker to disguise a protected asset (which should be non-copyable) as a standard data structure (which can be copied), bypassing the runtime's safety checks and enabling token counterfeiting.

Full technical details of the vulnerability, exploit mechanism, forensic analysis, and remediation architecture are found on the latest Flow post in the below link:
🔗 https://x.com/flow_blockchain/status/2008612688755130840

All Remaining Counterfeit FLOW Has Been Recovered

This morning, the final recovery of outstanding counterfeit FLOW from remaining centralized exchanges, including Binance and HTX, was executed by the Community Governance Council.
As of today, all counterfeit FLOW traced by forensic firms has been successfully recovered and is now isolated and restricted on-chain pending destruction. This marks the conclusion of Phase 4 of the Isolated Recovery Plan, fulfilling the mandate ratified by the validator network via super-majority consensus.

Permanent destruction of counterfeit tokens is scheduled for January 30th, 2026.

See the official post on X for more details: https://x.com/flow_blockchain/status/2010815968352878996