Root Cause
Aquifer's initial investigation pointed to a compromised privileged key — likely a deployer or upgrade-authority key — rather than a flaw in the AMM's swap or liquidity-pool logic. The attacker pre-staged both a Solana and an Ethereum address before the exploit, suggesting deliberate multi-chain asset planning.
Note: Root cause is unconfirmed as of September 3, 2026. Aquifer's post-exploit communications did not rule out a contract-level vulnerability. The "key compromise" classification is Defimon's initial on-chain attribution.
// No contract-level PoC available — root cause attributed to
// privileged-key access, not a swap/pool code-path exploit.
//
// Solana upgrade-authority compromise pattern (illustrative):
// solana program deploy \
// --upgrade-authority <attacker-controlled-keypair> \
// <malicious-or-drained-program.so>
// This replaces program bytecode silently, enabling arbitrary fund extraction.
Attack Steps
| Step | Action |
|---|---|
| 1 | Attacker obtains Aquifer's privileged key (upgrade authority or admin account) |
| 2 | Uses key to authorize large withdrawals or replace program bytecode |
| 3 | ~$2.5M in LP assets drained from Aquifer liquidity pools |
| 4 | Funds split: portion retained in Solana attacker address, portion bridged to Ethereum staging wallet |
| 5 | Aquifer detects exploit, suspends operations, posts on-chain message to attacker |
| 6 | Protocol offers 20% whitehat bounty contingent on return of 80% by September 3, 2026 |
Impact
- Total loss: ~$2.5M
- Chains affected: Solana (primary); Ethereum (attacker staging wallet)
- Bounty outcome: No confirmed fund return by the September 3 deadline
- Aquifer LPs bear full loss in the absence of a recovery or insurance backstop
Lessons for Auditors
- Upgrade authority is the highest-privilege key on a Solana program. It should be transferred to a multi-sig or burned after deployment; a hot wallet holding upgrade authority is equivalent to an admin backdoor.
- Key management is in-scope for a smart contract audit. Audit reports should document who holds which privileged keys, how they are stored, and what the revocation/rotation process looks like.
- Multi-chain staging wallets signal premeditation. Attackers routinely pre-fund Ethereum addresses before a Solana exploit — anomalous cross-chain fund flows are an early forensic indicator of a coordinated attack.
- Whitehat bounty windows should be realistically sized. A 3-day window for a $2.5M recovery is unlikely to produce results against a sophisticated attacker; a 7–14 day window with credible legal escalation and chain-analytics firms involved is generally more effective.