More Markets, a vault infrastructure protocol on Flow EVM, lost approximately $410,000 in Wrapped Flow (WFLOW) from its lending reserves on Aug. 31, 2026, according to Web3 security platform Blockaid.
The attacker exploited the protocol using Ankr Staked FLOW (ankrFLOW) in tandem with Aave V3's efficiency mode (E-mode). By treating the liquid staking token and its underlying asset as a correlated pair, E-mode permitted the attacker to overborrow from the mFlowWFLOW reserve, yielding approximately 15.5 million WFLOW tokens.
Blockaid initially reported $9.3 million in losses but corrected the figure to $410,000. DeFiLlama's independent on-chain accounting placed the drained amount between $410,000 and $420,000. The attacker realized an estimated $250,000 after slippage.
More Markets did not publicly disclose the exploit or confirm whether users sustained losses. Blockaid declined further comment.
The drain contributed to August 2026's total DeFi losses of $139.7 million, the third-largest monthly total for 2026, according to DeFiLlama. The figure fell from $254 million stolen in July. Days before the More Markets incident, the Cronos blockchain halted due to a $75 million exploit targeting lending protocol Tectonic.
