Aquifer AMM
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5F6wiE…Mhk7Summary
Aquifer is a proprietary automated market maker (AMM) on Solana focused on stablecoin swaps, which had accumulated approximately $2.8 million in total value locked prior to a security incident on August 31, 2026. Attacker-controlled wallets on both Solana and Ethereum drained approximately $2.5 million from the protocol in what Aquifer attributed to a wallet compromise rather than a smart contract vulnerability. A 20% white-hat bounty offer with a September 3, 2026 deadline passed without any publicly confirmed return of funds, and no technical post-mortem has been released.
Connected Entities
2 entities · 1 linked investigation- 7fTe9p…Rk7J→mentioned with→Aquifer AMM(50%)
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ◇7fTe9p…Rk7Jwalletalso inAquifer (Solana AMM)·28
Timeline(5 events)
31 August 2026
Attacker-controlled wallets on Solana and Ethereum drained approximately $2.5 million from the Aquifer AMM protocol. Blockchain security monitoring service Defimon reported the attack. Aquifer attributed the incident to a wallet compromise rather than a smart contract exploit.
crypto.news31 August 2026
Aquifer's Solana upgrade authority published a cryptographically signed on-chain white-hat message offering the attacker a 20% bounty in exchange for returning at least 80% of stolen funds by September 3, 2026 at 14:00 UTC. Separate Solana and Ethereum recovery addresses were supplied. Aquifer committed not to pursue civil claims if terms were met.
crypto.news1 September 2026
Multiple crypto news outlets including crypto.news, Phemex News, and COINOTAG published coverage of the Aquifer exploit and bounty offer.
Phemex News3 September 2026
White-hat bounty deadline of 14:00 UTC passed. No public confirmation of fund return was reported.
shattered.io4 September 2026
Post-deadline reporting confirmed no public source had verified that stolen funds were returned to the designated recovery addresses. No technical post-mortem published by Aquifer.
shattered.ioDecision Log
- hash: DgqnSXuoC9MmCpwUkAFjUhWnbSQ2vS4ZnTqEb4G5ndWC
This investigation is cryptographically anchored to the Solana blockchain (1 event). 5 of 7 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/16/2026, 11:26:15 PM
last updated: 9/17/2026, 4:51:45 AM
avoid.net — verified advice for a post-truth world