Skip to main content
AVOID.NET

Aquifer AMM

avoid.net/aquifer-amm→28/100·72% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·5F6wiE…Mhk7
last updated 2026-09-16

Summary

Aquifer is a proprietary automated market maker (AMM) on Solana focused on stablecoin swaps, which had accumulated approximately $2.8 million in total value locked prior to a security incident on August 31, 2026. Attacker-controlled wallets on both Solana and Ethereum drained approximately $2.5 million from the protocol in what Aquifer attributed to a wallet compromise rather than a smart contract vulnerability. A 20% white-hat bounty offer with a September 3, 2026 deadline passed without any publicly confirmed return of funds, and no technical post-mortem has been released.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Term Labs53□Ethereum90□Phemex□Aquifer AMM□Allbridge□Solana
Exchanges
△Jupiter Exchange
Wallets
◇7fTe9p…Rk7J
Relationships
  • Term Labs→mentioned with→Ethereum(80%)
  • Aquifer AMM→mentioned with→Solana(70%)
  • Aquifer AMM→mentioned with→Allbridge(60%)
  • Aquifer AMM→mentioned with→Ethereum(70%)
  • Aquifer AMM→mentioned with→Jupiter Exchange(60%)
  • Aquifer AMM→mentioned with→Phemex(60%)
  • Allbridge→mentioned with→Ethereum(60%)
  • Allbridge→mentioned with→Solana(70%)
  • 7fTe9p…Rk7J→mentioned with→Aquifer AMM(50%)
  • Aquifer AMM→mentioned with→Term Labs(80%)
  • + 5 more
Have evidence about Aquifer AMM?

Timeline(5 events)

31 August 2026

Attacker-controlled wallets on Solana and Ethereum drained approximately $2.5 million from the Aquifer AMM protocol. Blockchain security monitoring service Defimon reported the attack. Aquifer attributed the incident to a wallet compromise rather than a smart contract exploit.

crypto.news

31 August 2026

Aquifer's Solana upgrade authority published a cryptographically signed on-chain white-hat message offering the attacker a 20% bounty in exchange for returning at least 80% of stolen funds by September 3, 2026 at 14:00 UTC. Separate Solana and Ethereum recovery addresses were supplied. Aquifer committed not to pursue civil claims if terms were met.

crypto.news

1 September 2026

Multiple crypto news outlets including crypto.news, Phemex News, and COINOTAG published coverage of the Aquifer exploit and bounty offer.

Phemex News

3 September 2026

White-hat bounty deadline of 14:00 UTC passed. No public confirmation of fund return was reported.

shattered.io

4 September 2026

Post-deadline reporting confirmed no public source had verified that stolen funds were returned to the designated recovery addresses. No technical post-mortem published by Aquifer.

shattered.io
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓9/16/2026, 11:26:25 PM
    slot 447647160 · hash DgqnSXuoC9MmCpwUkAFjUhWnbSQ2vS4ZnTqEb4G5ndWC

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 5 of 7 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 9/16/2026, 11:26:15 PM

last updated: 9/16/2026, 11:26:15 PM

8 views

avoid.net — verified advice for a post-truth world