Skip to main content
AVOID.NET

Aquifer AMM

avoid.net/aquifer-amm28/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5F6wiE…Mhk7

Summary

Aquifer is a proprietary automated market maker (AMM) on Solana focused on stablecoin swaps, which had accumulated approximately $2.8 million in total value locked prior to a security incident on August 31, 2026. Attacker-controlled wallets on both Solana and Ethereum drained approximately $2.5 million from the protocol in what Aquifer attributed to a wallet compromise rather than a smart contract vulnerability. A 20% white-hat bounty offer with a September 3, 2026 deadline passed without any publicly confirmed return of funds, and no technical post-mortem has been released.

Connected Entities

2 entities · 1 linked investigation
Organizations
Aquifer AMM
Wallets
7fTe9p…Rk7J
Relationships
  • 7fTe9p…Rk7Jmentioned withAquifer AMM(50%)

Connected Through

1 shared actor · 1 investigation

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Aquifer AMM?

Timeline(5 events)

31 August 2026

Attacker-controlled wallets on Solana and Ethereum drained approximately $2.5 million from the Aquifer AMM protocol. Blockchain security monitoring service Defimon reported the attack. Aquifer attributed the incident to a wallet compromise rather than a smart contract exploit.

crypto.news

31 August 2026

Aquifer's Solana upgrade authority published a cryptographically signed on-chain white-hat message offering the attacker a 20% bounty in exchange for returning at least 80% of stolen funds by September 3, 2026 at 14:00 UTC. Separate Solana and Ethereum recovery addresses were supplied. Aquifer committed not to pursue civil claims if terms were met.

crypto.news

1 September 2026

Multiple crypto news outlets including crypto.news, Phemex News, and COINOTAG published coverage of the Aquifer exploit and bounty offer.

Phemex News

3 September 2026

White-hat bounty deadline of 14:00 UTC passed. No public confirmation of fund return was reported.

shattered.io

4 September 2026

Post-deadline reporting confirmed no public source had verified that stolen funds were returned to the designated recovery addresses. No technical post-mortem published by Aquifer.

shattered.io
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 5 of 7 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 9/16/2026, 11:26:15 PM

last updated: 9/17/2026, 4:51:45 AM

avoid.net — verified advice for a post-truth world