Aquifer AMM Exploit on Solana

What happened

Aquifer, an automated market maker on Solana, was exploited on 31 August 2026. DefiLlama records the loss at $2,469,729 and classifies it as an access-control incident involving an arbitrary external call.

DefiLlama’s classification is the only part of this incident that can be checked. Aquifer’s own site is unreachable from here, no statement from the project could be found, and the monitoring account said to have flagged it first could not be opened. So the mechanism reported elsewhere, a wallet compromise rather than a contract flaw, along with the attacker addresses and a reported whitehat bounty and deadline, are all unverified and are deliberately left out rather than repeated.