Aquifer Exploited for $2.5 Million in Funds
Aquifer, a Solana-based AMM, was exploited for approximately $2.5 million. The incident involved compromised wallets or admin credentials rather than a confirmed smart-contract issue.
Aquifer, a proprietary automated market maker (AMM) on Solana, experienced an exploitation resulting in a loss of about $2.5 million. The incident appears to have involved compromised protocol-linked wallets or admin credentials, rather than a verified bug within the smart contract itself. The attacker utilized addresses on both Solana and Ethereum to facilitate the exploit.
On the same day as the incident, Aquifer's Solana upgrade authority made an on-chain offer to the attacker. They proposed that if at least 80% of the stolen assets were returned by September 3, 2026, at 14:00 UTC to designated recovery addresses, the attacker could retain up to 20% as a bounty. In exchange, the project would refrain from pursuing any civil claims against the attacker.