Flow breaks down $3.9M exploit in full post-incident report

Flow published a post-incident report on January 6, 2026, discussing the root cause of its $3. 9 million exploit. An attacker exploited a Cadence runtime type confusion vulnerability to forge tokens. Flow said no existing user balances were accessed or compromised. Flow identifies type confusion vulnerability as exploit root cause A type confusion vulnerability was found […] source: https://www.cryptopolitan.com/flow-breaks-down-exploit-incident-report/