SwissBorg, a Swiss-based crypto wealth management platform, suffered a $41 million loss after hackers exploited a vulnerability in its staking partner Kiln’s API, draining 193,000 Solana tokens from its Earn program. While the breach has shaken confidence, SwissBorg assures users that its financial health remains strong and affected customers will be fully reimbursed.
A Targeted API Exploit
The hack targeted Kiln, SwissBorg’s staking infrastructure provider, which facilitates yield generation on blockchains like Solana and Ethereum. By compromising Kiln’s API—the software bridge connecting SwissBorg’s app to Solana’s staking network—hackers manipulated requests to siphon off 193,000 SOL tokens. Blockchain data on Solscan now labels the destination wallet as the “SwissBorg Exploiter,” urging caution. The attack was isolated to the Solana Earn program, leaving SwissBorg’s app and other Earn products, like those for Bitcoin and Ethereum, unaffected.
Limited Impact, Swift Response
SwissBorg’s CEO, Cyrus Fazel, addressed the breach in an X Space, emphasizing that the hack impacted only 1% of its customer base and 2% of total assets. “It’s a big amount of money, but it doesn’t put SwissBorg at risk,” Fazel stated. The company’s daily operations continue uninterrupted, and it has pledged to reimburse affected users using its current treasury. SwissBorg is also collaborating with international agencies, exchanges, and white hat hackers to investigate and block related transactions.
What Went Wrong?
The Solana Earn program allows users to stake SOL tokens through SwissBorg’s app for rewards, leveraging Kiln’s infrastructure to simplify the process for retail investors. The API vulnerability exposed a critical weak point in this setup, highlighting the risks of third-party integrations in crypto platforms. While SwissBorg has not disclosed specific details of the exploit, the incident underscores the growing sophistication of API-targeted attacks in the crypto space.
Moving Forward
Calling it “a bad day for SwissBorg,” Fazel framed the breach as a learning opportunity. The company’s proactive reimbursement plan and cooperation with authorities aim to restore trust. As the crypto industry faces increasing scrutiny over security, SwissBorg’s response could set a precedent for handling such incidents. For now, affected users will receive direct communication via email, and the broader crypto community is reminded to stay vigilant.