Flow has released a technical post-mortem report on a security incident that occurred on December 27, 2025, revealing that attackers exploited a type confusion vulnerability in the Cadence VM to forge tokens. Approximately $3.9 million worth of assets were transferred out via cross-chain bridges, including Celer, deBridge, Stargate, and Relay, before the network was paused. Most of the forged assets have been contained on-chain or are under control by relevant parties. Flow resumed mainnet operations on December 29, implementing isolation recovery measures and deploying patches to enhance static type checks and runtime defenses. The company is collaborating with on-chain forensic agencies and authorities for further investigation.