Which L1 halted after exploit?

TLDR

Flow (FLOW) is the Layer 1 that halted after an execution?layer exploit of about $3.9 million (news report).

1. Validators paused the network on 27 Dec to contain the incident (The Defiant coverage).
2. Flow initially floated a rollback, then scrapped it after pushback (CoinDesk update).
3. The revised plan restarts from the last sealed block and targets fraudulent mints (TokenPost summary).

Deep Dive

1. Exploit And Halt

An attacker exploited Flows execution layer and moved roughly $3.9 million via cross?chain bridges before validators halted the chain to prevent further damage.

1. The exploit targeted execution mechanics, not user wallets, per the foundations incident notes (CryptoNews brief).
2. Validators coordinated a halt and set the network into read?only mode during remediation (NullTX incident update).
3. Post?halt, the network resumed Phase 1 operations after fixes were prepared (The Defiant coverage).

2. Recovery Path

Flow proposed rolling back several hours of chain history, then reversed course after ecosystem pushback and opted for targeted remediation.

1. Partners warned a rollback could cause doubled balances and unbacked assets across bridges (TradingView summary).
2. The foundation chose to restart from the last sealed block, preserve legitimate transactions, and destroy fraudulently minted tokens (CoinDesk update).
3. This approach limits collateral effects while addressing illicit assets (TokenPost summary).

3. Market And Governance Impact

The episode highlights the trade?off between immutability and crisis intervention, with noticeable market pressure during the downtime.

1. Reports noted price drawdowns and temporary exchange restrictions during the incident window (The Block via TradingView).
2. Community backlash emphasized decentralization norms and operational risks of rewrites (Cointelegraph recap).
3. The revised plan aims to balance user protection with network integrity and partner coordination (CryptoNews brief).

Conclusion

Flows exploit led to a validator?coordinated halt, then a pivot from rollback to targeted remediation to preserve legitimate activity. The main takeaway is containment with minimized cross?system fallout, but trust and operational confidence will take time to rebuild.