Flow broke crypto’s golden rule this weekend. Following a relatively minor $3.9mn exploit on 27 Dec 2025, the foundation coordinated with validators to roll back the chain, effectively erasing six hours of history to save a rounding error in total value locked.
Flow’s ‘Undo Button’: $3.9mn Rollback Exposes Centralization Rot
29 December 2025 - 08:48 CET
By Sandmark staff
The move has triggered a firestorm of criticism from infrastructure partners who were left in the dark, highlighting the fragility of Flow's "decentralized" claims. If a chain can be paused and rewound at the behest of a foundation, the question becomes whether it is a blockchain at all, or simply a database with extra steps.
The centralized switch
On 27 Dec 2025, an attacker exploited a vulnerability in Flow’s execution layer, moving approximately $3.9mn in assets, primarily via bridges to Ethereum, before validators could coordinate a freeze.
According to the statement from the Flow Foundation, the exploit did not access user balances, and "all user deposits remain intact." However, the solution was drastic. The foundation orchestrated a "coordinated block reorganization" that returned the ledger to its state prior to the attack.
The network was effectively time-travelled back to 15:25 UTC, wiping out all subsequent transactions until the shutdown at 21:30 UTC. While this neutralized the hacker, it also nuked legitimate activity during that window.
Burning bridges
The rollback was executed with speed but seemingly little coordination with external partners. Alex Smirnov, co-founder of deBridge, slammed the lack of communication on X.
"I can confirm that deBridge — one of the major bridge providers for Flow — received zero communication or coordination from the Flow team," Smirnov wrote. He warned that the "rushed decision" introduced systemic risks for custodians and counterparties who acted honestly during the erased window.
"The rushed decision to roll back the chain will likely cause financial damage far exceeding the impact of the original exploit," Smirnov noted, adding that the 2022 BNB Chain exploit was handled "far more professionally" by isolating attackers without rolling back the global state.
Market vote of no confidence
The market reaction was swift and brutal. FLOW plummeted nearly 13% over the last 24 hours, extending a seven-day decline to 39%, according to CoinMarketCap data.
As of 28 Dec 2025, the network remains in a zombie state. The foundation described it as "read-only" or "idle" mode. Blocks are being produced, but no new transactions are accepted while exchanges and bridges struggle to synchronize their systems with the altered history.
The foundation claims it is "carefully evaluating" feedback, admitting that "taking additional time to ensure full alignment... is preferable to a rushed resumption." For a Layer-1 blockchain pitching itself as the future of consumer crypto, the damage to trust may cost far more than the $3.9mn they tried to save.
