What is Flying Tulip and what did it just introduce?

Flying Tulip, founded by Andre Cronje, introduced a withdrawal circuit breaker that can delay or queue withdrawals during abnormal outflows. The feature is designed to limit losses during potential exploits. It adds a new risk management layer to the protocol.

How does the withdrawal circuit breaker work on Flying Tulip?

The system slows or restricts withdrawals when outflows exceed normal capacity. In some cases, transactions may fail and require retrying, while in others they are queued and processed later. This helps prevent large-scale fund drains during attacks.

What is the difference between the two circuit breaker models?

For the Perpetual PUT product, withdrawals can revert and must be retried manually. For the ftUSD stable asset, withdrawals are queued and become claimable after a delay. This allows more controlled liquidity management depending on the product.

What does “fail-open” design mean in this context?

A fail-open system ensures that if the circuit breaker itself fails, withdrawals can still proceed normally. This prevents users from being permanently locked out of funds due to a system malfunction. It balances safety with accessibility.

Why is Flying Tulip adding this feature now?

The move comes after a surge in DeFi exploits, with over $600 million lost in April alone. These incidents highlighted vulnerabilities beyond smart contracts, including infrastructure and operational risks. The circuit breaker aims to address those broader threats.

What recent exploits influenced this decision?

Major incidents include the Drift Protocol exploit, which lost around $280 million, and the Kelp exploit, which lost about $293 million. Together, they accounted for most of April’s losses. These events exposed weaknesses in DeFi systems.

What types of risks are becoming more common in DeFi?

According to researchers, risks are shifting toward operational failures like compromised multisig wallets, key leaks, and configuration errors. These are not traditional smart contract bugs. They are harder to detect and prevent.

How does this affect users of Flying Tulip?

Users may experience delayed or retried withdrawals during high-risk situations. While this can be inconvenient, it helps protect funds from being drained in an attack. It introduces a tradeoff between speed and security.

Flying Tulip adds breaker as DeFi hacks surge

Written by BloombergPublished Apr. 24 2026

Flying Tulip, founded by Andre Cronje, has introduced a withdrawal circuit breaker to mitigate risks from abnormal fund outflows.

The mechanism allows withdrawals to be delayed, queued or retried depending on the product, aiming to slow potential exploits and give time for investigation during suspicious activity.

Flying Tulip said the safeguard is designed to “fail open,” ensuring transactions can still proceed if the system itself malfunctions.

The feature operates differently across products, with some withdrawals reverting temporarily while others are queued and processed after a delay, particularly for its ftUSD stable asset.

The update comes as decentralised finance faces mounting security challenges, with April losses exceeding $600 million amid a series of high-profile exploits.

Incidents involving Drift Protocol and Kelp accounted for the majority of losses, highlighting vulnerabilities beyond smart contract code.

Researchers including Amir Hajian said recent failures were increasingly tied to operational weaknesses such as compromised multisigs and infrastructure flaws rather than purely code-level bugs.