Fogo mainnet back online after recovery of 237 million stolen tokens

Fogo has restarted its mainnet after recovering and permanently removing 237 million of the 400 million FOGO tokens stolen in a security incident that forced the Layer 1 blockchain to halt operations.

Summary

• Fogo has restarted its mainnet after a security incident involving 400 million FOGO tokens forced the Layer 1 blockchain to halt operations.
• The project recovered 237 million FOGO tokens and permanently removed them from the total supply.
• Another 163 million FOGO remain unrecovered, with Fogo working with centralized exchanges and law enforcement to trace the affected assets.
• Fogo has yet to disclose how the Foundation was compromised, with its investigation into the incident still ongoing.

Fogo said in its latest update that the mainnet was operating normally again, while efforts to recover the remaining affected tokens were continuing with centralized exchanges and law enforcement.

The restart comes several days after Fogo stopped its blockchain on Aug. 29 to prevent the attacker from moving tokens received during a compromise involving the Fogo Foundation.

Of the 400 million FOGO taken during the incident, 237 million have now been recovered and permanently removed from the token's total supply, the project said. That leaves 163 million FOGO from the original amount that have not been reported as recovered.

"Efforts to recover the remaining affected assets are ongoing with CEXs and law enforcement," Fogo said.

The project did not provide further details on how the 237 million tokens were recovered or the process used to permanently remove them from supply. Fogo said its investigation remained underway and asked users to rely on its official channel for further information.

The latest update gives the network a clearer recovery figure after several days of uncertainty over the status of the stolen assets, though Fogo has yet to publish a full account of how the compromise occurred.

Fogo initially disclosed the incident on Aug. 28, when the Foundation said an unknown actor had compromised the organization and transferred 400 million FOGO to what it described as a "bad actor."

At the time, the Foundation said the blockchain itself had not been affected and continued operating normally. Exchanges, law enforcement agencies and forensic specialists had been notified as the project began tracing the assets.

That changed the following day when Fogo halted the network while validators prepared an upgrade. The pause was intended to stop further movement of the affected tokens, with the project providing no restart time when it announced the action.

The 400 million FOGO involved in the incident represented 4% of the blockchain's 10 billion-token genesis supply and more than 10% of the circulating supply at the time.

Fogo did not disclose which addresses or systems within the Foundation had been compromised, and its latest statement does not identify the attack vector. No complete post-incident report has been released as the investigation continues.

Fogo's incident remains under investigation, with the Foundation yet to disclose whether compromised credentials, internal systems or another attack method allowed the 400 million FOGO transfer.

Fogo launched its mainnet in January 2026 after raising $7 million through a Binance token sale conducted at a $350 million valuation.

The Layer 1 network was built primarily for onchain trading and markets itself around high-speed transaction processing, including a target block time of 40 milliseconds and infrastructure designed to reduce exposure to maximal extractable value.

With 237 million FOGO now recovered and removed from supply, the project said work with centralized exchanges and law enforcement remains focused on the rest of the affected assets. Further information will be released as the investigation continues.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.