security · "Fogo" · "protocol security" · "incident response"
Fogo Halts Mainnet After Attacker Obtains 400 Million Tokens
The Foundation says attacker-linked addresses received 4% of genesis supply and more than 10% of circulating FOGO. The cause and restart timing remain undisclosed.

Fogo halted its Layer 1 mainnet after the Fogo Foundation said an attacker obtained 400 million FOGO tokens from Foundation-controlled wallets.
The amount represents 4% of the network’s genesis supply and more than 10% of circulating supply. At the market price cited during the initial reporting, the tokens were worth roughly $3 million. That valuation can change quickly and should not be treated as a final loss figure.
The chain was paused roughly 15 hours after the Foundation first disclosed unauthorized activity. Validators were instructed to upgrade software intended to restrict addresses linked to the incident. Bitget and KuCoin also suspended FOGO deposits and withdrawals.
The public record remains incomplete. Fogo had not disclosed the attack vector, a final accounting of affected assets or a timetable for restarting the network when this edition was prepared.
Blue Rogues interpretation: the central risk is larger than the spot value of the tokens. When an incident affects a double-digit share of circulating supply, containment, validator coordination and transparent recovery become tests of the network’s operational credibility.
What to watch: a technical post-mortem, the status of attacker-linked tokens, exchange wallet reopening and a verified mainnet restart.
Sources:
- https://www.theblock.co/news/defi/2026-08-29-layer-1-blockchain-fogo-halts-mainnet-after-attacker-receives-400-million-fogo-tokens-10-of-circulating-supply-413064
