Hassan Maishera
TL;DR
-
Layer 1 blockchain Fogo halted its network on Saturday after an attacker obtained 400 million FOGO tokens.
-
The tokens were worth approximately $3 million and represented more than 10% of FOGO’s circulating supply.
-
The Fogo Foundation said its organization had been compromised but has not disclosed how the attack occurred or which addresses were affected.
-
Fogo stopped the network to prevent the tokens from moving while validators deployed an upgrade.
Fogo Pauses Network Following $3 Million Incident
Layer 1 blockchain Fogo halted its network on Saturday, approximately 15 hours after the Fogo Foundation disclosed that an attacker had received 400 million FOGO tokens.
In the last hour the Fogo Mainnet has been temporarily halted as a precautionary measure following the detection of unauthorized activity.
— Fogo (@fogo) August 29, 2026
The halt is being initiated to prevent further movement of the affected assets. During the halt, the network will be upgraded to restrict…
The tokens were worth around $3 million at the time of the incident. Fogo announced the network pause at 12:29 p.m. Eastern Time on Saturday. The blockchain appears to have stopped producing blocks within the hour before that announcement.
According to the project, the halt was intended to prevent further movement of the affected tokens while validators upgraded the network. Fogo did not explain how the planned restrictions would work or provide an estimated restart time.
The Fogo Foundation first disclosed the incident at 9:13 p.m. on Friday. It said an unknown party had compromised the organization and transferred 400 million FOGO tokens to what it described as a bad actor.
The Foundation added that it had notified cryptocurrency exchanges, law-enforcement authorities, and blockchain forensic specialists.
At the time, it said the FOGO blockchain had not been affected and was continuing to operate normally. However, the network was halted roughly 15 hours later.
The Foundation has not identified the attack method, disclosed which systems or wallets were compromised, or published the addresses that received the tokens.
It also remains unclear whether the attacker stole tokens from an existing allocation or exploited a mechanism that enabled unauthorized issuance.
Stolen Tokens Exceed 10% of Circulating Supply
The 400 million affected FOGO tokens represent 4% of the blockchain’s 10 billion-token genesis supply.
More significantly, they account for over 10% of FOGO’s current circulating supply. Such a large quantity could create substantial selling pressure if the attacker gains access to sufficient exchange or decentralized-market liquidity.
FOGO traded near $0.0074 at the time of writing, placing the estimated value of the affected assets at approximately $3 million, according to DefiLlama data.
Halting the blockchain may prevent the tokens remaining on Fogo from moving, but it is not yet clear whether any were transferred to exchanges or bridged to other networks before the pause.
Bitget suspended FOGO deposits and withdrawals approximately one hour before the Foundation publicly disclosed the compromise.
The exchange attributed the suspension to wallet maintenance and did not explicitly connect it to the security incident.
KuCoin subsequently announced that it had also temporarily disabled FOGO deposits and withdrawals.
The restrictions could help prevent the attacker from depositing the affected tokens on centralized platforms. However, neither exchange disclosed whether any suspicious transfers had already reached its systems.
The Fogo Foundation has not provided details about its coordination with trading platforms or explained whether any attacker-controlled accounts or assets have been frozen.
Halt Ends Fogo’s Reported Perfect-Uptime Record
A guide published on Fogo’s website in March claimed that its mainnet had maintained 100% uptime since its launch.
That claim had not been revised following Saturday’s network halt. Stopping block production can help contain an active security incident by preventing an attacker from moving funds. However, it also prevents legitimate users from making transactions and can raise questions about the network’s resilience and degree of decentralization.
Fogo has not explained how validators agreed to halt the chain, how many participated in the decision, or what conditions must be met before operations resume.
Fogo launched its mainnet in January following a $7 million token sale conducted through Binance at a reported valuation of $350 million.
The project positions itself as a high-performance Layer 1 blockchain built specifically for onchain trading. It targets block times of approximately 40 milliseconds and aims to reduce traders’ exposure to maximal extractable value.
Maximal extractable value, commonly known as MEV, refers to profits that validators or other network participants can capture by reordering, inserting, or excluding transactions from blockchain blocks.
The security incident and subsequent halt represent an early test for Fogo’s infrastructure, governance, and incident-response procedures.
