Ankr ankrFLOW Unbacked Mint via More Markets — $410K Facial / ~$246-250K Realized

On August 31, 2026, a flaw in Ankr's ankrFLOW liquid staking token contract — not in More Markets or Flow EVM itself — allowed an attacker to mint ankrFLOW without corresponding backing. The unbacked LST was then used as inflated collateral on More Markets, a lending protocol operating with Aave-style E-Mode on Flow EVM, to borrow against a value that did not exist. Blockaid's initial automated assessment of $9.3M facial exposure was later corrected; the Flow Foundation confirmed the real gross exposure at $410,000 (8.6M ankrFLOW backing 15.5M WFLOW borrowed), with roughly $246,000-250,000 realized by the attacker after slippage. No depositor losses were reported. Only partial transaction and contract identifiers have been publicly disclosed.