MultiversX Mainnet Halted Following VM Layer Vulnerability Attack

The MultiversX network (formerly Elrond) has officially suspended its mainnet operations following a targeted cyberattack that exploited a critical vulnerability in its virtual machine layer. On September 20, 2026, the project’s engineering team identified that attackers attempted to leverage atomicity issues within the MultiversX Virtual Machine (VM) to trigger invalid state changes on the blockchain. The decision to halt the network was implemented as a proactive measure to prevent further unauthorized transactions and to safeguard the integrity of the distributed ledger.

Technical Fix and Network Recovery Procedures

Following the detection of the exploit, MultiversX developers confirmed that the issue stems from the way the VM layer handles transaction atomicity, which allowed for inconsistencies in how state changes were recorded. The technical team has already developed a software patch and is currently conducting rigorous testing within a shadow fork environment to ensure stability.

• Validation of the fix in a simulated mainnet environment.
• Coordination with validator nodes to deploy the necessary updates.
• Communication with centralized exchanges and cross-chain bridge providers.
• Execution of a targeted recovery plan to revert invalid state changes.

Atomicity in blockchain terms ensures that a transaction is either processed completely or not at all; a failure in this logic can lead to double-spending or unauthorized balance updates. The team emphasized that the recovery plan aims to preserve all finalized transaction history for legitimate users while specifically neutralizing the impact of the hacker's actions.

Guidance for EGLD Holders and Ecosystem Participants

While the network remains offline, users and investors are advised to exercise caution and avoid interacting with the protocol until an official "all-clear" is issued. The suspension affects all native assets, including EGLD and ESDT tokens.

The engineering team has prepared a fix and is currently verifying it in a shadow fork environment. If testing is successful, they will coordinate with validator nodes, exchanges, and infrastructure partners to deploy the fix to the mainnet.

Stakeholders are strictly urged not to submit or re-broadcast transactions, as these may fail or remain in a pending state indefinitely. Furthermore, users should refrain from attempting deposits or withdrawals via cross-chain bridges or trading platforms until the infrastructure is fully synchronized and secured.

In conclusion, the MultiversX team is working toward a swift restoration of services, focusing on a fix that isolates the exploit without compromising the broader history of the sharded architecture. Regular users do not need to take manual action regarding their holdings at this time. The incident highlights the ongoing challenges of maintaining VM layer security in complex blockchain environments, and the community currently awaits further updates on the successful deployment of the validator patch.