The Fogo Foundation said Friday that an unknown actor compromised one of its wallets, sending 400 million FOGO tokens, about 4% of the token’s 10 billion genesis supply, to an address it does
The Fogo Foundation said Friday that an unknown actor compromised one of its wallets, sending 400 million FOGO tokens, about 4% of the token’s 10 billion genesis supply, to an address it does not control. In a post on X, the Foundation called the incident “unfortunate” and said it alerted exchanges immediately after finding the breach. It said it is working with law enforcement and outside forensic experts to trace the funds, and that the Fogo blockchain itself continues to operate normally.
The Fogo Foundation experienced a compromise by an unknown actor which unfortunately resulted in 400mm FOGO tokens being sent to a bad actor.
The Foundation alerted exchanges immediately and is actively communicating with law enforcement as well as forensic experts.
There is…
— Fogo (@fogo) August 29, 2026
FOGO’s price dropped about 18% in the hours after the disclosure, falling from roughly $0.0092 to about $0.0075. At that price, the stolen tokens are worth close to $3 million, a small fraction of the real cost. Based on Fogo’s own market data, the 400 million tokens equal roughly 10% of the token’s freely circulating supply, more than double the 4% share of total supply the Foundation’s own framing points to.
The Foundation’s statement does not say how the wallet was compromised, when the breach actually occurred, or whether it holds keys to other wallets with similar exposure. That gap matters because a similar pattern already played out once this year in the same ecosystem.
In February, Solana-based trading platform Step Finance disclosed a breach of its treasury and fee wallets, attributing the loss only to “a well known attack vector.” Step’s token lost 90% of its value within a day, once that vague explanation failed to reassure holders.
Fogo’s stolen amount is roughly a tenth of Step’s loss in dollar terms. But the pattern matches closely: a project-controlled wallet compromised, not a smart-contract bug exploited, paired with a statement short on technical specifics. That match is why the details Fogo hasn’t given yet matter more than the ones it has.
The breach lands ahead of a scheduled unlock. Fogo’s own tokenomics disclosures show that 12.06% of the genesis supply, held by institutional investors, begins vesting on Sept. 26. A security incident this close to new supply entering the market raises the bar for how quickly and specifically the Foundation needs to account for what happened, since investors weighing that unlock will now be weighing it against an unresolved wallet compromise instead of a clean security record.
Fogo is a Solana Virtual Machine-compatible Layer-1 blockchain built on the Firedancer client. It launched its mainnet on Jan. 15 after raising a $5.5 million seed round, an $8 million Echo community sale run through Jordan Fish’s platform, and a $7 million strategic token sale to Binance users. The chain markets itself on roughly 40-millisecond block times, aimed at high-frequency trading rather than general-purpose use.
The Foundation said it would share more information “as soon as possible.” Whether this stays a contained operational failure or becomes a deeper trust problem depends on whether that update names a cause, confirms a timeline, and shows the frozen or recovered status of the 400 million tokens, the same specifics that were missing when Step Finance’s own disclosure unraveled.
