Stabble
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·668DVw…zkqXSummary
Stabble is a Solana-based decentralized exchange (DEX) that specializes in stablecoin liquidity pools. On April 7, 2026, onchain investigator ZachXBT publicly identified the protocol's former CTO, operating under the name Keisuke Watanabe, as an alleged North Korean DPRK IT operative who had also worked at Solana DeFi project ElementalDeFi. Following the disclosure, Stabble's new management team issued an emergency alert urging all liquidity providers to withdraw funds immediately, citing the unquantified risk of planted backdoor code; TVL collapsed 62% within hours and the protocol halted operations pending fresh security audits.
Connected Entities
9 entities · 60 linked investigations- ZachXBT→mentioned with→Ethereum(70%)
- Ethereum Foundation→mentioned with→Ethereum(80%)
- Citrine Sleet / AppleJeus→mentioned with→Drift Protocol(80%)
- ElementalDeFi→mentioned with→Citrine Sleet / AppleJeus(80%)
- ElementalDeFi→mentioned with→Drift Protocol(80%)
- Ethereum→mentioned with→Ethereum Foundation(80%)
- Drift Protocol→mentioned with→Citrine Sleet / AppleJeus(80%)
- Stabble→mentioned with→Ethereum Foundation(80%)
- Stabble→mentioned with→Citrine Sleet / AppleJeus(80%)
- Stabble→mentioned with→Drift Protocol(80%)
- + 17 more
Community submissions
“Tier 1 Protos reporting on ZachXBT April 7 2026 identification of North Korean developer Keisuke Watanabe embedded in Stabble's team as CTO, prompting emergency liquidity withdrawal and 62% TVL collapse”
— avoid-scout
Timeline(9 events)
19 May 2024
Stabble raises $1.44 million private funding round, total funding reaches $2.49 million
DeFiLlama / ICO Drops7 March 2026
Approximate date new management team takes over Stabble operations (approximately four weeks prior to April 7 incident)
DecryptApril 2026
Drift Protocol exploited for approximately $285 million in what TRM Labs, Elliptic, and Drift Protocol attributed with medium-to-high confidence to DPRK-linked threat actor UNC4736; attack was the culmination of a six-month social engineering operation
Bloomberg / Elliptic / TRM Labs7 April 2026
ZachXBT publicly identifies Keisuke Watanabe (aliases: kasky53, keisukew53, kdevdivvy, 0xWoo) as an alleged DPRK IT operative, disclosing the individual's connection to ElementalDeFi and Stabble; disclosure includes wallet addresses, email, and OSINT documentation
The Block / Protos / Decrypt7 April 2026
Approximately seven hours after ZachXBT's disclosure, Stabble issues emergency alert at 9:34 a.m. ET urging all liquidity providers to withdraw funds immediately; TVL begins collapsing from approximately $1.75 million
Decrypt / Bitcoin.com News7 April 2026
Stabble TVL collapses 62% within hours, falling from approximately $1.75 million to under $663,000; protocol halts normal operations
Yahoo Finance / Decrypt8 April 2026
Stabble announces comprehensive security audits will be conducted before operations resume; no confirmed exploit disclosed
AllCryptoCurrencyDaily / Metaverse PostDecision Log
- hash: BWTbWQiHsE7pcv8YM1aQt3biKdzrM8vWzXL85pbuwEnR
This investigation is cryptographically anchored to the Solana blockchain (1 event). 18 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 5/22/2026, 4:00:28 PM
last updated: 7/25/2026, 6:29:44 AM
3 viewsavoid.net — verified advice for a post-truth world