Flow advances recovery plan, raises exchange concerns after $3.9M exploit