More Markets Exploit Drains $9.3M in WFLOW

The More Markets exploit on Flow EVM drained about 15.5 million WFLOW from its mFlowWFLOW lending reserve on 31 August 2026. Blockchain security firm Blockaid estimated the detected impact at roughly $9.3 million, while the final loss remained under investigation. Blockaid said the attacker combined Ankr’s liquid-staking token ankrFLOW with Aave V3-style E-Mode. The configuration allows higher borrowing limits for assets considered highly correlated. The attack allegedly exploited an inflated ankrFLOW valuation, enabling the attacker to use overvalued collateral to borrow real WFLOW. There is no evidence that Ankr or the Flow blockchain was compromised. The precise cause remains unclear and may involve More Markets’ Aave V3 implementation, E-Mode parameters, the ankrFLOW price feed, or their interaction. More Markets said it was investigating and had not released a full post-mortem. The More Markets exploit is bearish for WFLOW in the short term because it may increase selling pressure, reduce liquidity and weaken confidence in Flow-based DeFi. The incident also highlights risks involving liquid-staking tokens, oracle design, thin liquidity and leveraged E-Mode positions. Traders and lenders should review E-Mode settings, health factors, liquidation buffers, price sources and whether funds are held in isolated or shared reserves. The direct impact currently appears limited to the affected application, but broader DeFi lending tokens could remain volatile as investors reassess protocol security.
Bearish
The direct price impact is bearish for WFLOW. The exploit removed a substantial amount of WFLOW from a lending reserve and may force additional selling or defensive withdrawals. Questions over collateral valuation, oracle reliability and E-Mode risk can also reduce liquidity and widen volatility in WFLOW markets in the short term. The impact may remain contained because there is no evidence that Flow or Ankr itself was compromised. If More Markets restores reserves, identifies the pricing or configuration flaw and publishes a credible post-mortem, some confidence could recover over the longer term. However, until the loss is fully clarified and affected lending markets are secured, traders are likely to apply a risk discount to WFLOW and related Flow DeFi assets. The event is therefore bearish for WFLOW, while its broader market effect is more limited and mainly confidence-driven.