Leaderboard
86All-time rank
SwissBorg
Sep 9, 2025
$41.5M
Lost
$41.5M
Recovered
$0
Net loss
$41.5M
Unrecovered0% recovered
5M) when staking partner Kiln's API credentials were compromised. Attacker embedded malicious authorization instructions in unstaking transactions to transfer withdrawal authority to attacker-controlled addresses.
- Target
- CEX
- Classification
- Frontend & Infrastructure
- Technique
- API Key Compromised
- Attribution
- Unknown
- Chains
Solana
Event timeline
- Sep 9, 2025Exploit executed — $41.5M drained via api key compromised
- Attributed to Unknown
- Recovery status Unrecovered 0%