Binance Tightens Trading Controls on Flow After Blockchain Exploit

Binance has adjusted its trading and risk-monitoring policies following a $3.9 million exploit on the Flow blockchain, placing the token under increased scrutiny while removing several related trading pairs.

The exchange said it will delist nine spot trading pairs starting Saturday, including the FLOW/Bitcoin pair, and apply its internal "monitoring tag" to Flow alongside three other tokens. According to Binance, the designation is used for assets that exhibit "notably higher volatility and risks compared to other listed tokens," and signals closer review with a higher possibility of future delisting if standards are not met.

Binance stated that the changes followed "recent reviews," but did not explicitly link the decision to the Flow exploit. Cointelegraph contacted the exchange to ask whether the incident influenced the move, but no response had been received at the time of publication.

The policy shift comes after attackers extracted approximately $3.9 million worth of tokens from the Flow blockchain and attempted to move the funds through centralized exchanges. In a preliminary post-mortem, Flow said it was "concerned by one exchange's handling of this incident," alleging that weaknesses in AML and KYC controls allowed stolen FLOW to be deposited, partially converted into Bitcoin, and withdrawn.

Flow did not identify the exchange involved. Some market participants speculated that the description could refer to Binance, though the exchange has not publicly addressed the claims.

Market participants generally view monitoring tags and trading pair removals as signals of elevated risk rather than short-term technical adjustments. While tokens under monitoring remain tradable, the designation often precedes reduced liquidity, wider spreads, and increased price volatility. The loss of a major Bitcoin-denominated trading pair can further affect market depth and routing efficiency.

Meanwhile, the Flow Foundation said it is close to fully restoring the network. The remaining steps involve user account restoration and remediation of fraudulent tokens introduced during the exploit. "What was initially projected as a sequential, multi-day process has been executed in parallel," the foundation said, citing the restoration of both Cadence and EVM functionality while preserving legitimate transaction history.

Earlier this week, Flow abandoned a proposal to roll back the blockchain to reverse the exploit after criticism that such a move would undermine transaction finality. The foundation said a full post-mortem report is expected within 48 hours, with ecosystem restoration targeted for completion within the week.

The episode underscores the growing role of centralized exchanges as enforcement points following onchain exploits. Even as affected networks pursue technical recovery, exchange-level actions can have lasting effects on liquidity and market confidence, highlighting the increasing emphasis on risk controls and compliance in crypto trading venues.