NewsDisclosureOn-chainCollateral
The $9.3m ankrFLOW headline was wrong by a factor of twenty
Blockaid's initial estimate put the MORE Markets drain at $9.3 million. The corrected figures reported four days later are roughly $410,000 at spot. What a lender should take from the gap.
By Staff, Lend Ledger
An attacker exploited Ankr’s ankrFLOW liquid-staking contract on 31 August 2026, created roughly 8.6 million unbacked ankrFLOW, supplied them as collateral on MORE Markets, and removed about 15.5 million WFLOW from that market’s lending reserve. Trade coverage of the incident, which carries a correction dated 2 September 2026, attributes the valuation to Flow Foundation: roughly $410,000 at the spot price, and approximately $246,000 realised by the attacker after slippage.
The first number the market saw was $9.3 million.
Two reported figures, and the arithmetic between them
Per that same coverage, the security firm Blockaid’s original alert put the impact at approximately $9.3 million and framed the event as a MORE Markets or Flow EVM exploit — the version reproduced widely on 31 August. The correction says that figure was an initial detector estimate rather than the spot value of the WFLOW removed, and moves the vulnerable component to an Ankr Solidity contract, not Flow EVM and not a MORE Markets smart contract.
Set the two reported numbers beside each other and the initial estimate is more than twenty times the corrected one. That is arithmetic between two published figures, not an accusation: a detector estimate is not an accounting.
The exposure a lender had was never the headline
Strip the figure out and the mechanism is the part worth keeping. Depositors in that WFLOW reserve were exposed to the mint logic of a token whose issuer sits outside the lending market. Collateral quality is usually discussed as a price problem — oracle feed, haircut, liquidation threshold. Supply integrity is the prior question, and no haircut survives collateral whose supply can be conjured. The correction changes who owned the defect, not the shape of the dependency.
The second exposure is informational. A depositor deciding on 31 August whether to withdraw was reading a number that stood for two days, then was withdrawn. The same lag ran through the MAMO post-mortem on Moonwell’s forum, where the residual figure only firmed once the protocol did its own accounting.
What this desk did not read
We did not read Blockaid’s correction or Flow Foundation’s statement directly. That coverage says Blockaid’s original post was deleted once the correction issued, so every figure above is attributed at one remove — to trade reporting, not a primary document. We make no claim about what MORE Markets has said since, or about the state of its borrowing today; the 31 August “no statement yet” line is stale and we have not re-checked it. Nor does anything here suggest that Ankr, MORE Markets, Flow Foundation or Blockaid is regulated, licensed or authorised in any jurisdiction.
The practical residue is a sizing rule, not a verdict. Collateral you did not mint is a counterparty you did not pick, and a first-day loss figure is an estimate wearing a decimal point. Lending crypto assets risks total loss of the deposit, and nothing here is financial advice.