Roughly 192,600 SOL was drained from a counterparty wallet tied to a SOL Earn merchandise connected Swissborg. The crypto speech committed to making the losses whole.
Updated Sep 9, 2025, 10:03 a.m. Published Sep 9, 2025, 9:25 a.m.
Crypto speech SwissBorg said astir 192,600 SOL ($41.5 million) was stolen from an outer wallet utilized exclusively for its SOL Earn strategy connected Monday.
The exploit stemmed from a partner's compromised exertion programming interface (API), a mechanics that allows bundle systems to pass with 1 another, affecting a azygous counterparty, the speech said successful a station connected X. It was not a hack of the SwissBorg platform.
SOL Earn Incident & SwissBorg Recovery Plan
A spouse API was compromised, impacting our SOL Earn Program (~193k SOL, <1% of users).
👉 Rest assured, the SwissBorg app remains afloat unafraid and each different funds successful Earn programs are 100% safe.
Our betterment plan.
Immediate Actions…
The nonaccomplishment affected less than 1% of users and represented astir 2% of SwissBorg’s full assets, the steadfast said.
All different funds and strategies stay secure, and idiosyncratic balances wrong the SwissBorg app are unaffected. SOL Earn redemptions are paused portion betterment efforts proceed.
SwissBorg says it volition screen immoderate shortfall, ensuring nary idiosyncratic losses. The institution is moving with white-hat hackers, information firms and instrumentality enforcement to retrieve the funds. A afloat incidental study volition travel erstwhile investigations conclude.
This exploit arrives amid a crisp emergence successful crypto thefts, with implicit $2.17 cardinal already stolen successful 2025.
More For You
Ledger CTO Warns of NPM Supply-Chain Attack Hitting 1B+ Downloads

According to Guillemet, the malicious codification — already pushed into packages with implicit 1 cardinal downloads — is designed to silently swap crypto wallet addresses successful transactions. That means unsuspecting users could nonstop funds straight to the attacker without realizing it.
What to know:
- Charles Guillemet, main exertion serviceman astatine hardware wallet shaper Ledger, warned connected X connected Monday that a large-scale proviso concatenation onslaught is underway aft the compromise of a reputable developer’s Node Package Manager (NPM) account.
- According to Guillemet, the malicious codification — already pushed into packages with implicit 1 cardinal downloads — is designed to silently swap crypto wallet addresses successful transactions. That means unsuspecting users could nonstop funds straight to the attacker without realizing it.