-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0316
============================================================

Advisory-ID:  0xCERT-2026-0316
Severity:     Medium
Published:    2026-11-05T16:33:01.000Z
Updated:      2026-11-06T08:43:28.746Z
Chains:       n/a
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0316

Title: FLOKI trading bot taken offline after exploit; users told to stop depositing into bot wallets

Summary
- -------
FLOKI says it is investigating an exploit of its trading bot discovered early on 5 Nov 2026 and has taken the bot offline. Do not deposit into bot wallets; users who exported their private key should move remaining funds to a wallet only they control.

Details
- -------
Summary
On 5 November 2026 the FLOKI team announced it is investigating an exploit of the FLOKI trading bot discovered in the early hours of that morning. The bot has been taken offline while the team confirms which users were affected. Affected users will be moved to new, secure wallets and any remaining funds transferred to them.

Affected
- - FLOKI trading bot (@flokitradingbot) user bot wallets; the affected users have not yet been identified publicly
- - No fix available at time of publication; the bot is offline

Impact
The team describes an exploit affecting bot user funds. The root cause, the chains involved, the amount lost and the number of affected users have not been disclosed at time of publication.

Recommended actions
- - Do not deposit funds into your FLOKI bot wallet until further notice.
- - If you exported your bot wallet's private key and it still holds funds, move them to a wallet only you control.
- - FLOKI states its team will never DM you first or ask for your seed phrase or private key; ignore anyone offering "refunds" or "recovery".

Source & attribution
This 0xCERT advisory summarises an announcement by the FLOKI team: https://x.com/FLOKI/status/2118381080260608281. Corroborated by The Defiant (https://thedefiant.io/news/security/floki-takes-trading-bot-offline-amid-exploit-investigation) and listed in SlowMist Hacked (https://hacked.slowmist.io/). Details may change; refer to the original source for the authoritative record.

References
- ----------
- - https://x.com/FLOKI/status/2118381080260608281
- - https://thedefiant.io/news/security/floki-takes-trading-bot-offline-amid-exploit-investigation
- - https://www.cryptotimes.io/2026/11/06/floki-suspends-trading-bot-after-security-exploit-affecting-wallets/
- - https://hacked.slowmist.io/

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmruG5UJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmeTWVJbsBK0/tVnwy3tU12QcIkqARsBr8vQ7fZL
2jjtThYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAA0wQD/VzWUqaEWX7PnuS0c
7sjUEl2sPMUbhNW7EoJZJ9jfj1UA/2gv/LYojfLhCi2++87mQgoA0B2W8tcT
WLdWfh7acP8F
=hibx
-----END PGP SIGNATURE-----