Skip to main content
AVOID.NET

Aquifer AMM

avoid.net/aquifer-amm→28/100·72% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-10-27 · Re-researched — Re-researched in full by the investigator agent at a reader's request; the text was rewritten from new research. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·5F6wiE…Mhk7

Summary

Aquifer is a Solana-based automated market maker that lost approximately $2.47-2.5 million in tokens on August 31, 2026, when an attacker drained 18 of its 45 token vaults in roughly 40 minutes. Reports disagree on the root cause, with some outlets citing a compromised wallet and an on-chain investigation attributing the loss to a program that accepted forged balance data without verifying the source. Aquifer offered the attacker a 20% whitehat bounty for returning funds by September 3, 2026; no public source has confirmed any funds were returned, and the project has not published a technical post-mortem.

Connected Entities

10 entities · 60 linked investigations
Organizations
□Term Labs□Ethereum90□Phemex55□Aquifer AMM□Allbridge□Solana89□Aquifer (Solana AMM)
Exchanges
Wallets
◇8af8Rn…yjox◇7fTe9p…Rk7J
Relationships
  • Term Labs→mentioned with→Ethereum(80%)
  • Aquifer AMM→mentioned with→Solana(70%)
  • Aquifer AMM→mentioned with→Allbridge(60%)
  • Aquifer AMM→mentioned with→Ethereum(70%)
  • Aquifer AMM→mentioned with→Jupiter Exchange(60%)
  • Aquifer AMM→mentioned with→Phemex(60%)
  • 8af8Rn…yjox→mentioned with→Aquifer (Solana AMM)(50%)
  • 7fTe9p…Rk7J→mentioned with→Aquifer (Solana AMM)(50%)
  • Allbridge→mentioned with→Ethereum(60%)
  • Allbridge→mentioned with→Solana(70%)
  • + 7 more
Have evidence about Aquifer AMM?

Timeline(4 events)

31 August 2026

Attacker drains approximately $2.47-2.5 million from 18 of Aquifer's 45 token vaults in 212 transactions over roughly 40 minutes.

KuCoin / Bitquery

August 2026

Aquifer's Solana upgrade authority posts an on-chain whitehat bounty offer addressed to the attacker's identified wallets.

Capwolf / Bitquery

September 2026

Crypto news outlets, including crypto.news (citing Defimon) and Bitquery, publish initial and on-chain analysis of the exploit; Bitquery traces roughly 1,000.8 ETH held in a single address linked to the attacker.

crypto.news / Bitquery

September 2026

Deadline for Aquifer's whitehat bounty offer passes; no public source confirms the attacker returned funds.

Capwolf / Bitquery
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓9/16/2026, 11:26:25 PM
    slot 447647160 · hash DgqnSXuoC9MmCpwUkAFjUhWnbSQ2vS4ZnTqEb4G5ndWC

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 0 of 8 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 9/16/2026, 11:26:15 PM

last updated: 10/27/2026, 12:16:48 AM

9 views

avoid.net — verified advice for a post-truth world