Blockaid Pins $9.3 Million Exploit on Flow Lender More Markets

Developers on Flow EVM just got a wake-up call. More Markets, a lending protocol built on the network, reportedly lost 15.5 million Wrapped Flow (WFLOW) to an exploit on Monday. Security firm Blockaid was the first to flag it, putting the initial damage at $9.3 million.

Here's the thing though. More Markets hasn't confirmed a thing. The team says it's looking into the claim and will publish findings once the review wraps up. That's a classic DeFi response, and honestly, I get it. You don't want to admit to a loss of that size before you've triple-checked every transaction.

But Blockaid's track record here's worth paying attention to. The firm traced the stolen funds onchain and says the numbers check out. 15.5 million WFLOW, roughly $9.3 million at current prices. That's not a rounding error.

The timing matters too. This is the latest in a string of exploits hitting smaller lending protocols. Hackers keep finding edge cases in cross-chain token wraps, and WFLOW being a bridged asset makes it a prime target. The question worth asking: if Blockaid's trace is accurate, where does that leave lenders on More Markets?

The attack appears to target the protocol's lending pools specifically, which means user funds could be in the blast radius. But without official confirmation, we're stuck in a holding pattern. I'm not entirely convinced the "we're investigating" line means much yet. In this market, it's often code for "we're hoping it's a false alarm."

History suggests otherwise for projects that assume they're safe just because they haven't been hit. Small lenders are getting picked off one by one, and the next target is probably already being scouted.

The real thing to watch now is More Markets' next announcement. If they confirm Blockaid's numbers, expect a wave of withdrawals and a tough recovery path.