Solana AMM Aquifer hit by $2.5 million exploit, offers 20% bounty
Solana-based automated market maker Aquifer has lost roughly $2.5 million in an exploit involving wallets on Solana and Ethereum, with the protocol offering the attacker a 20% bounty for returning most of the funds. Blockchain security monitoring service Defimon reported the attack on Aug. 31, identifying separate Solana and Ethereum addresses controlled by the suspected exploiter. Aquifer later sent an on-chain whitehat offer seeking the return of at least 80% of the assets linked to the incident. Solana prop AMM @_aquifer_ (https://t.co/Ht8ZLFgSDM) exploited for ~$2.5M Attacker (Ethereum): https://t.co/EsfR5KFiQK Attacker (Solana): https://t.co/UozUOIj3sX https://t.co/gV1FFq9Mmw pic.twitter.com/UWJAM7FCGX — Defimon Alerts (@DefimonAlerts) August 31, 2026 The offer gives the attacker until Sept. 3 at 14:00 UTC to transfer the assets, or their equivalent value, to recovery addresses provided by Aquifer. The person controlling the wallets may retain up to 20% of the funds as a whitehat bounty if the conditions are met. Aquifer said it would not pursue civil claims arising from the exploit if the attacker complies with the terms, subject to applicable law. The agreement would not bind law enforcement agencies, regulators, sanctions authorities or other government bodies. Aquifer exploit involves wallets on two chains Aquifer operates as a proprietary automated market maker on Solana, where its liquidity is used to facilitate









