- World Liberty Financial burns 166.667 million tokens to recover funds from compromised wallets.
- Emergency action follows phishing attacks and third-party security flaws.
- WLFI faces scrutiny from lawmakers over potential token sales to sanctioned entities.
World Liberty Financial (WLFI) has taken urgent action to recover millions of dollars in compromised tokens. On November 19, the project announced an emergency burn-and-reallocate procedure after several user wallets were compromised prior to the official launch. The breach involved phishing attacks and exposed seed phrases, but the issues were linked to third-party security flaws, not WLFI’s contracts.
The staff reacted promptly by freezing the affected wallets in September. They also asked their users to undergo another round of know-your-customer (KYC) verification and provide secure wallet addresses.
This was aimed at protecting user assets and additional breaches. The process started getting back on track again as the team implemented new smart contract logic to transfer controlled tokens.
1/ Prior to WLFI’s launch, a relatively small subset of user wallets were compromised via phishing attacks or exposed seed phrases.
— WLFI (@worldlibertyfi) November 19, 2025
Since then, we’ve tested new smart contract logic to safely reallocate user funds and verified users’ identity via KYC checks.
Shortly, users who…
WLFI Burns $22.1M in Tokens to Recover Lost Funds
On November 19, WLFI conducted this emergency operation, incinerating the 166.667 million WLFI tokens worth about $22.14 million off the balances in the wallets that had been compromised.
These tokens were resold to confirmed recovery addresses. The move was meant to assist users who had lost access to their wallets as a result of security breaches such as phishing attacks or private key leaks.
On-chain analyst Emmett Gallic affirmed that the purpose of the function was to be used in cases where tokens are stolen or lost. WLFI indicated that the recovery was carried out carefully in order to prevent errors.
Also Read: World Liberty Financial Distributes 8.4M WLFI Tokens to Boost USD1 Adoption
World Liberty Fi executed an emergency function burning 166.667M $WLFI ($22.14M) from compromised address, reallocating to a recovery address.
— Emmett Gallic (@emmettgallic) November 19, 2025
Function designed for two scenarios:
An investor loses wallet access before vesting OR malicious account acquires WLFI via exploit pic.twitter.com/VSUDWhDPCR
KYC Compliance Required for Token Recovery in Secure Wallets
Individuals who completed through the KYC procedures and provided new wallet addresses would get their tokens in secure wallets. User accounts that fail to complete the verification would have their wallets frozen until they undergo the recovery procedure.
The most common reasons for the breaches were phishing attacks and the disclosure of personal keys. The September EIP-7702 problems were associated with some of the attacks and the Pectra upgrade of Ethereum.
The malicious contracts that had been installed in stolen wallets emptied tokens, and 272 wallets were frozen. WLFI also cautioned its users against fake accounts and scam clones and advised users only to apply to official channels to recover.
US legislators are reviewing the project while WLFI continues with the recovery. Senators Elizabeth Warren and Jack Reed have called on WLFI to investigate the claims of selling WLFI tokens to approved organizations. WLFI is yet to react to such allegations.
Nonetheless, WLFI is steadily working on its USD1 stablecoin and other integrations despite the difficulties. After the recovery is provided, the project will start focusing on further development.
Also Read: India to Launch ARC, a Rupee-Pegged Digital Asset Developed with Polygon and Anq
How would you rate your experience?