The Flow network rollback, proposed after a December 26 exploit, draws sharp criticism from deBridge co-founder Alex Smirnov, who warns it risks greater financial harm to honest users, bridges, and partners than the original attack by creating doubled balances and reimbursement issues without impacting the attacker, who already bridged out $4 million.
-
Smirnov claims no coordination from Flow despite their synchronization pledges, urging validators to halt until questions on doubled balances and reimbursements are answered.
-
Rushed rollback affects ecosystem players like custodians and bridges operating honestly during the window.
-
Attacker consolidated ~$4M before rollback; past incidents handled without rollbacks, per Smirnov.
Flow rollback sparks debate after hack: DeBridge’s Alex Smirnov slams plan for harming users more than exploit. Flow insists it’s safest path. Key concerns, FAQs inside—stay secure in crypto.
What is the Flow Network Rollback Controversy?
The Flow network rollback controversy centers on the blockchain’s response to a December 26 attack, where the Flow team proposed reverting transactions to a pre-exploit checkpoint. DeBridge co-founder Alex Smirnov, whose cross-chain bridge integrates with Flow, publicly criticized the move as rushed and damaging, highlighting a lack of communication with partners despite Flow’s claims of synchronization efforts. This has led validators and ecosystem participants to question the plan’s viability.
Why Does deBridge’s Alex Smirnov Oppose the Flow Rollback?
Alex Smirnov argues the Flow rollback introduces systemic risks outweighing the exploit’s damage. “A rollback introduces systemic issues that affect bridges, custodians, users, and counterparties who acted honestly during the affected window,” he stated in a public post on X (formerly Twitter). Key concerns include handling doubled balances for users who bridged out during the window and reimbursing those who bridged in, plus impacts on custodians like LayerZero for transactions in that period.
Smirnov pointed to the attacker’s actions—bridging out approximately $4 million and consolidating funds beforehand—rendering the rollback ineffective against them while punishing innocents. He referenced prior blockchain incidents resolved professionally without rollbacks, isolating hackers instead, and questioned Flow’s decision-makers and deviation from such approaches. Urging validators to pause nodes, he called for clear remediation plans, partner coordination, and involvement from groups like the Security Alliance before proceeding.
Flow, a layer-1 blockchain known for scalable NFTs and gaming applications, halted its network after the exploit around 11:25 PM PST on December 26 until 5:30 AM PST December 27. Validators deployed the Mainnet-28 fix, but the chain remains in read-only mode as of December 28 to sync with bridges, centralized exchanges (CEXs), and decentralized exchanges (DEXs), preventing state mismatches.
Frequently Asked Questions
What caused the Flow network attack and rollback proposal?
The Flow network suffered an exploit on December 26, prompting a halt and proposal to rollback transactions from 11:25 PM PST to 5:30 AM PST the next day. This removes unauthorized transactions but requires legitimate ones to be resubmitted, as stated by the Flow team in their official communications.
Is the Flow rollback the safest option after the hack?
Flow’s team maintains the rollback to a pre-exploit checkpoint is the most logical path to restore integrity by excising malicious transactions. They extended synchronization with partners to ensure all reset properly, prioritizing network safety over speed, though critics like Smirnov argue alternatives exist without broader harm.
Key Takeaways
- Communication Gaps Amplify Risks: Despite Flow’s synchronization claims, partners like deBridge report no prior coordination, underscoring the need for transparent dialogue in crisis response.
- Rollback Limitations Exposed: With the attacker already extracting $4M, the measure fails to recover funds but disrupts honest participants, echoing lessons from past exploits.
- Validator Caution Essential: Pause validation until remediation details clarify balance handling and partner impacts to safeguard the ecosystem.
Conclusion
The Flow network rollback controversy highlights tensions between rapid recovery and ecosystem stability post-exploit, with deBridge’s Alex Smirnov raising valid concerns over Flow rollback impacts on bridges and users. As Flow extends synchronization into December 28, clear answers on reimbursements and coordination could restore confidence. Blockchain teams must balance security with partner trust—monitor developments to navigate similar risks in decentralized finance.
Source: https://en.coinotag.com/flow-rollback-plan-draws-debridge-criticism-over-potential-greater-damage
