Solana AMM Aquifer Seeks Asset Recovery After $2.5 Million Exploit

Blockchain security monitoring service Defimon first alerted the community to the incident on August 31, identifying suspicious activity across both the Solana and Ethereum networks. While the total value locked in the protocol currently sits at roughly $2.8 million, the exploit has cast a spotlight on the vulnerability of project-controlled wallets. Aquifer has authorized an on-chain message promising to waive civil claims against the exploiter, provided the terms are met within the specified window. This protection, however, explicitly excludes potential interventions by law enforcement or regulatory bodies.

Technical details regarding the breach remain scarce. Current evidence suggests that Aquifer’s smart contracts were not the point of failure, shifting the investigation toward potential compromises of private keys or administrative credentials. This pattern mirrors several recent security incidents across the Solana ecosystem, where attackers bypassed smart contract logic entirely by targeting off-chain infrastructure or executive devices. As investigators continue to track the movement of funds between the identified Solana and Ethereum addresses, the industry remains in a waiting period to see if the bounty offer will secure the return of the capital or if the protocol will be forced to pursue further legal recourse.