Floki Suspends Affected Bot Services Amid Exploit Investigation, Warns Against Deposits
Key Facts
Floki suspended the affected bot services while investigating an exploit, saying it was working to protect funds still in affected wallets and identify users impacted by the incident. TokenPost reported that the team had begun responding to the incident, with details still under investigation. On November 6, the company warned users against sending funds to bot wallets until further notice. The directive made halting deposits and suspending the service the two immediate steps announced by the team. The available coverage did not specify the amount of funds affected or the financial losses.
TokenPost said the team was identifying affected users and trying to protect the funds remaining in the wallets concerned. It then plans to move affected users and their remaining balances to new, secure wallets. The wording describes a future plan; it does not mean the transfers have already been completed. The report did not give a timeline for the transfers or details of the new wallets. It also did not provide a final tally of the amounts still held in affected wallets.
The team issued a specific warning to users who had exported their private keys and still had funds in those wallets: move the balances to a wallet they fully control. The instruction does not apply categorically to every user; it is tied to the situation described by the team—having exported the key and still holding funds in the wallet concerned. According to TokenPost, the team said those users should move the funds to a wallet under their full control. This is part of the guidance on remaining funds as the team continues to identify affected users. The report did not mention a similar step for users who do not meet these conditions.
Floki also warned about impersonators posing as the team during its handling of the incident. It said it would not initiate contact with users through direct messages and would not ask them for recovery phrases or private keys. It also urged users to ignore anyone offering refunds or an asset recovery service. These warnings set out the communications users should expect from the team, alongside the warning against sending additional funds to bot wallets. The company kept the services suspended and the deposit warning in place until further instructions, according to TokenPost.
The incident comes against the backdrop of earlier comments by a Floki adviser on the bot’s past activity. In August 2026, the adviser said the bot had surpassed $40 million in trading volume and had about 22,500 users, while fees generated were close to $600,000. Those figures relate to the previous bot through that month and are not an estimate of funds affected by the current incident. That same month, the adviser said the team had decided to retire the bot because of security risks he described as potentially existential to the project, as well as Telegram limits at peak activity. He added that the replacement would eliminate those risks, though the report provided no technical details linking them to the exploit under investigation.
A Floki adviser said in July 2026 that the upcoming replacement would retain a similar utility model, without disclosing details at the time. In response to the current incident, the team said it was continuing to identify affected users and protect remaining funds, and that moving them and their balances to new wallets would follow that process. According to TokenPost, the service remained suspended and the deposit warning remained in effect pending further instructions from Floki. The report did not specify when the bot would restart or when the transfers would be completed. The next announced development depends on what the company instructs regarding users, wallets and remaining balances.