Fogo Foundation hack — August 2026

The Fogo Foundation disclosed at 01:13 UTC on 29 August 2026 that an unknown actor had compromised it and moved 400 million FOGO to an outside address. That is 4% of the ten billion genesis supply and more than 10% of the roughly 3.88 billion tokens then circulating. The foundation said it had alerted exchanges immediately and was in contact with law enforcement and forensic specialists.

Its first statement held that the blockchain itself was unaffected and operating normally. About fifteen hours later the mainnet was halted anyway, to stop further movement of the affected assets while validators upgraded the network to restrict the addresses involved. The chain stayed down for more than forty-six hours and was back in operation by 2 September, when the foundation said it had recovered 237 million of the 400 million FOGO and permanently removed them from the total supply, so they return neither to the treasury nor to the market. It did not say how the tokens were recovered. The remaining 163 million are unaccounted for, and the foundation said work with centralised exchanges and law enforcement to recover them was continuing. Bitget and KuCoin restricted FOGO deposits and withdrawals during the incident.

This was a compromise of the organisation, not of the chain's code or consensus. The foundation did not say how it happened, and no party has established whether a private key leaked, cloud infrastructure was breached, or someone was deceived into signing.

The amount is recorded at about $3m: 400 million tokens at the post-incident price near $0.0075 used by The Block and crypto.news. The Crypto Times headlined $3.88m, but its own stated price of $0.007495 gives $2.998m, and no published price reproduces the higher figure. The 237 million recovered tokens are valued at the same rate, about $1.78m. None of it should be read as a sum realisable in cash: a block exceeding a tenth of the circulating supply could not be sold at any quoted price.