Skip to main content
AVOID.NET

Aquifer (Solana AMM)

avoid.net/aquifer-solana-amm22/100·55% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4rdAUZ…G6bh

Summary

Aquifer, a proprietary automated market maker operating on Solana, lost approximately $2.5 million on August 31, 2026 to an exploit that drained wallets on both Solana and Ethereum. Aquifer's team believes the incident stemmed from compromised wallet access rather than a smart-contract vulnerability, and offered the attacker a 20% white-hat bounty in exchange for returning at least 80% of the funds by September 3, 2026. As of the most recent reporting, no return of funds has been publicly confirmed, no technical postmortem establishing the root cause has been released, and it is unclear whether law enforcement has become formally involved.

Connected Entities

3 entities · 10 linked investigations
Wallets
8af8Rn…yjox7fTe9p…Rk7J
Organizations
Aquifer (Solana AMM)
Relationships
  • 7fTe9pvrwXJRBHq9MaSyVPR4PgEuhqLiA93Dxf4gRk7Jmentioned withAquifer (Solana AMM)(50%)
  • 8af8RnAgyKzNt4fjDaP8w8pBekYVux1ja4AofavRyjoxmentioned withAquifer (Solana AMM)(50%)
Have evidence about Aquifer (Solana AMM)?

Timeline(4 events)

August 2026

Attacker-controlled wallets drain approximately $2.5 million from Aquifer across Solana and Ethereum addresses; first flagged by blockchain monitor Defimon.

crypto.news

September 2026

Aquifer's Solana upgrade authority publishes a cryptographically signed on-chain message offering the attacker a 20% white-hat bounty in exchange for returning at least 80% of stolen funds, setting a September 3, 2026, 14:00 UTC deadline; the offer explicitly excludes binding law enforcement, regulators, or sanctions authorities.

crypto.news

3 September 2026

Bounty deadline (14:00 UTC) passes with no public confirmation that the attacker returned any funds or accepted the offer.

shattered.io

September 2026

As of the most recent available reporting, no technical postmortem disclosing the root cause of the compromise has been published, and no law-enforcement involvement has been publicly confirmed.

crypto.news
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 0 of 5 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 9/9/2026, 1:33:23 AM

last updated: 9/9/2026, 1:34:45 AM

avoid.net — verified advice for a post-truth world