{"id":46890,"date":"2025-09-10T19:31:43","date_gmt":"2025-09-10T19:31:43","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=46890"},"modified":"2025-09-10T19:31:43","modified_gmt":"2025-09-10T19:31:43","slug":"the-protocol-swissborgs-sol-earn-wallet-exploited-for-41-5m","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=46890","title":{"rendered":"The Protocol: SwissBorg\u2019s SOL Earn Wallet Exploited for $41.5M"},"content":{"rendered":"<div>\n<p>Welcome to The Protocol, CoinDesk&#8217;s weekly wrap of the most important stories in cryptocurrency tech development. I\u2019m Margaux Nijkerk, a reporter at CoinDesk.<\/p>\n<p>In this issue:<\/p>\n<ul>\n<li>SwissBorg\u2019s SOL Earn Wallet Exploited for $41.5M After Partner&#8217;s API Is Compromised<\/li>\n<li>Ledger CTO Warns of NPM Supply-Chain Attack Hitting 1B+ Downloads<\/li>\n<li>Backpack Opens Regulated Perpetuals Exchange in Europe After FTX EU Acquisition<\/li>\n<li>Polygon PoS Sees Transaction Finality Lag, Patch in Progress<\/li>\n<\/ul>\n<div style=\"display:none\">Unknown block type &#8220;divider&#8221;, specify a component for it in the `components.types` option<\/div>\n<h3>Network News<\/h3>\n<p><strong>SWISSBORG\u2019S SOL EARN WALLET EXPLOITED:<\/strong> Crypto exchange SwissBorg said about 192,600 SOL ($41.5 million) was stolen from an external wallet used exclusively for its SOL Earn strategy. The exploit stemmed from a partner&#8217;s compromised application programming interface (API), a mechanism that allows software systems to communicate with one another, affecting a single counterparty, the exchange said <a href=\"https:\/\/x.com\/swissborg\/status\/1965123506477359471?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1965123506477359471%7Ctwgr%5E222677cc8ddb90bb575b4dc1ce0db68ac8bdb4ac%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fwww.coindesk.com%2Ftech%2F2025%2F09%2F09%2Fswissborg-s-sol-earn-wallet-exploited-for-usd41-5m-after-partner-s-api-is-compromised\">in a post on X<\/a>. It was not a hack of the SwissBorg platform. The loss affected fewer than 1% of users and represented about 2% of SwissBorg\u2019s total assets, the firm said. All other funds and strategies remain secure, and user balances within the SwissBorg app are unaffected. SOL Earn redemptions are paused while recovery efforts proceed. SwissBorg says it will cover any shortfall, ensuring no user losses. The company is working with white-hat hackers, security firms and law enforcement to recover the funds. A full incident report will follow once investigations conclude. This exploit arrives amid a sharp rise in crypto thefts, with over $2.17 billion already stolen in 2025. \u2014 <em>Shaurya Malwa<\/em> <a href=\"https:\/\/www.coindesk.com\/tech\/2025\/09\/09\/swissborg-s-sol-earn-wallet-exploited-for-usd41-5m-after-partner-s-api-is-compromised\">Read more<\/a>.<\/p>\n<p><strong>LEDGER CTO WARNS OF PNM ATTACK: <\/strong>Charles Guillemet, the chief technology officer at hardware wallet maker Ledger, <a href=\"https:\/\/x.com\/p3b7_\/status\/1965094840959410230?s=46&amp;t=LcdHxOgtVViJTm8qmgGf-g\">warned on X<\/a> that a large-scale supply chain attack was underway after a reputable developer\u2019s Node Package Manager (NPM) account was compromised. According to Guillemet, the malicious code \u2014 already pushed into packages with over 1 billion downloads \u2014 is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting users could send funds directly to the attacker without realizing it. Guillemet did not name the developer whose account he said was compromised. The incident underscores how deeply interconnected open-source software is and why security lapses in developer tools can ripple into the crypto economy almost instantly. A day later, Guillemet shared that almost zero crypto users had been affected by the hack. \u201cNPM is a tool commonly used in software development using JavaScript, which makes integrating packages easy for developers,\u201d said Guillemet in a message to CoinDesk. When an attacker compromises a developer\u2019s account, they can slip malicious code into widely used packages. \u201cThe malicious code attempts to drain users by swapping addresses used in transaction or general on-chain activity and replacing them with the hacker\u2019s address,\u201d Guillemet added. \u2014 <em>Margaux Nijkerk <\/em><a href=\"https:\/\/www.coindesk.com\/tech\/2025\/09\/08\/ledger-cto-warns-of-npm-supply-chain-attack-hitting-1b-downloads\">Read more<\/a>.<\/p>\n<p><strong>BACKPACK EU GOES LIVE FOLLOWING FTX EU ACQUISITION: <\/strong>Backpack Exchange, a global cryptocurrency trading platform, said its European division, Backpack EU, is officially live. Operating out of Cyprus and licensed under the European Union\u2019s MiFID II framework, the exchange is positioning itself as one of the first fully regulated venues in Europe to offer crypto derivatives, starting with perpetual futures. \u201cAs far as I&#8217;m aware, it&#8217;s just going to be us and Kraken\u201d in Europe offering perpetual futures, Armani Ferrante, the CEO of Backpack, said in an interview with CoinDesk. The debut follows Backpack\u2019s acquisition of FTX EU earlier this year. In January, the FTX bankruptcy estate said the sale of FTX EU to Backpack <a href=\"https:\/\/www.coindesk.com\/business\/2025\/01\/09\/ftx-bankruptcy-estate-hits-out-over-unauthorized-sale-of-ftx-eu-to-backpack-exchange\">was not authorized<\/a>. Since then, the issue has been resolved and <a href=\"https:\/\/www.coindesk.com\/business\/2025\/04\/02\/new-ftx-eu-owner-backpack-initiates-customer-claims-process\">in April the exchange began distributing<\/a> funds to former FTX EU customers, fulfilling their pledge to compensate users affected by the collapse of Sam Bankman-Fried\u2019s crypto empire. Backpack EU will provide users access to over 40 trading pairs with up to 10x leverage, the team said in a statement. The platform says it aims to give both retail and institutional traders a compliant gateway to advanced crypto trading products. The rollout also highlights Backpack\u2019s broader strategy of rebuilding trust in digital assets following a string of exchange failures. \u2014 <em>Margaux Nijkerk<\/em> <a href=\"https:\/\/www.coindesk.com\/tech\/2025\/09\/08\/backpack-opens-regulated-perpetuals-exchange-in-europe-after-ftx-eu-acquisition\">Read more<\/a>.<\/p>\n<p><strong>POLYGON POS CHAIN EXPERIENCES FINALITY LAG:<\/strong> Polygon\u2019s proof-of-stake chain is live, but transactions are taking longer than usual to lock in, with finality running 10\u201315 minutes behind schedule. Finality is the assurance that a transaction or piece of data is irreversible once confirmed and added to a block in the blockchain. The foundation said <a href=\"https:\/\/x.com\/0xPolygonFdn\/status\/1965701735395000755\">in an X post<\/a> that a fix has been identified and is being rolled out to validators and service providers. The slowdown was tied to issues on some Bor\/Erigon nodes and RPC providers, according to Polygon\u2019s status page. Node restarts resolved the problem for many validators, while others had to rewind to the last finalized block before resyncing, <a href=\"https:\/\/status.polygon.technology\/\">a status page shared<\/a>. The disruption comes weeks after Polygon\u2019s Heimdall v2 upgrade promised 5-second finality through a modernized consensus stack. \u2013 <em>Shaurya Malwa<\/em> <a href=\"https:\/\/www.coindesk.com\/markets\/2025\/09\/10\/polygon-pos-sees-transaction-finality-lag-patch-in-progress\">Read more<\/a>.<\/p>\n<div style=\"display:none\">Unknown block type &#8220;divider&#8221;, specify a component for it in the `components.types` option<\/div>\n<h3><strong>In Other News<\/strong><\/h3>\n<ul>\n<li>World Liberty Financial (WLFI), the crypto protocol linked to Donald Trump and his family, <a href=\"https:\/\/etherscan.io\/tx\/0x0230880850ae1daebdb1a9984f0f6b1601390bbe4738152556738aa901862d74\">blacklisted<\/a> Tron founder and key investor Justin Sun&#8217;s blockchain address, preventing him transferring WLFI tokens. The move affects 595 million unlocked WLFI tokens held on the address, worth roughly $107 million at current prices, according to Arkham data. The action followed the Sun-linked address making several outbound transactions of WLFI tokens on the Ethereum blockchain \u2014 including one for $9 million worth of the tokens \u2014 blockchain data shows. Sun, in a translated post on X, said that the &#8220;address only conducted a few generic exchange deposit tests, with very low amounts, and then created address dispersion, without involving any buying or selling, which could not possibly have any impact on the market.&#8221; In a later statement Sun urged the WLFI team to unblock his tokens. \u2014 <em>Sam Reynolds <\/em><a href=\"https:\/\/www.coindesk.com\/tech\/2025\/09\/04\/world-liberty-financial-blacklists-justin-sun-s-address-with-usd107m-wlfi\">Read more<\/a>.<\/li>\n<li>Decentralized finance protocol Ethena submitted a <a href=\"https:\/\/mirror.xyz\/0xF99d0E4E3435cc9C9868D1C6274DfaB3e2721341\/vG9tVz8p6Da6vX8CiZ30A0CYM3wIiWlIBX6Zlj0qhQ8\">proposal<\/a> to issue Hyperliquid&#8217;s <a href=\"https:\/\/www.coindesk.com\/tech\/2025\/09\/05\/hyperliquid-moves-forward-to-launch-proprietary-stablecoin\">forthcoming stablecoin<\/a>, joining a bidding competition that has already attracted companies including Paxos, Sky, Frax and Agora. The token would be fully backed by Ethena&#8217;s USDtb, a stablecoin issued with federally chartered bank Anchorage Digital and fully backed by BUIDL, the tokenized money market fund by asset management giant BlackRock and Securitize. If adopted, Ethena pledged that 95% of net revenue from USDH reserves would flow back to the Hyperliquid ecosystem, the proposal said. Ethena also said it would cover the costs of migrating existing USDC trading pairs on Hyperliquid to USDH to ease adoption. \u2014 <em>Kristzian Sandor <\/em><a href=\"https:\/\/www.coindesk.com\/business\/2025\/09\/09\/ethena-joins-race-for-hyperliquid-s-stablecoin-with-blackrock-backed-proposal\">Read more<\/a>.<\/li>\n<\/ul>\n<div style=\"display:none\">Unknown block type &#8220;divider&#8221;, specify a component for it in the `components.types` option<\/div>\n<h3><strong>Regulatory and Policy<\/strong><\/h3>\n<ul>\n<li>Nasdaq, the U.S. exchange where the tech sector&#8217;s biggest names list their stocks, is <a href=\"https:\/\/www.linkedin.com\/pulse\/how-nasdaq-extending-its-use-tokenization-us-equities-tal-cohen-w1iae\/\">seeking to put equities on the blockchain<\/a>, asking the U.S. Securities and Exchange Commission to bless its effort even as others in the securities world are sprinting toward the same tokenization goal.If the SEC filing is approved, the exchange will let customers choose either the traditional route for trading equities or do so on-chain with tokenized stocks \u2014 an option that would be treated with the same priority as the legacy method. The move by Nasdaq follows an effort by digital brokerage Robinhood to <a href=\"https:\/\/www.coindesk.com\/business\/2025\/06\/30\/robinhood-pushes-deeper-into-crypto-with-own-blockchain-tokenized-stock-launch\">issue stock tokens for European customers<\/a> in July, giving access to some 200 U.S. stocks and exchange-traded funds (ETFs). Bringing equities and other real-world assets onto blockchain rails has been among the most sizzling of the digital-asset world&#8217;s innovations, and the competition has been growing fierce for both traditional finance names and crypto natives to make moves. \u2014 <em>Jesse Hamilton <\/em><a href=\"https:\/\/www.coindesk.com\/policy\/2025\/09\/08\/nasdaq-seeks-nod-from-u-s-sec-to-tokenize-stocks\">Read more<\/a>.<\/li>\n<li>President Donald Trump&#8217;s <a href=\"https:\/\/www.coindesk.com\/policy\/2025\/08\/11\/who-is-patrick-witt-president-trump-s-next-senior-adviser-on-crypto\">new crypto guy<\/a>, Patrick Witt, is picking up the baton from his predecessor, Bo Hines, in goading lawmakers to finish sweeping U.S. crypto policies and pushing regulators to put the new stablecoin law into practice, he said in an interview with CoinDesk. Working under the administration&#8217;s crypto czar, David Sacks, Witt is the new point of contact for crypto matters in the White House after the brief tenure of his predecessor, who went on to work for stablecoin giant Tether. While Hines saw the conversion of Congress&#8217; stablecoin effort into law and was able to attend the White House ceremony to cement it, he left shortly after, leaving a lengthy crypto to-do list for Witt.&#8221;There&#8217;s no drop off here,&#8221; said Witt, who was elevated to the job last month, just two weeks after the administration issued its wide-reaching <a href=\"https:\/\/www.coindesk.com\/policy\/2025\/07\/30\/donald-trump-s-golden-age-of-crypto-takes-shape-aims-defi-towards-mainstream-report\">strategy report for tackling U.S. crypto policy<\/a>. &#8220;We&#8217;re keeping the pedal to the metal with all of the different initiatives on the legislative front and the interagency actions recommended in the report.&#8221; \u2014 <em>Jesse Hamilton <\/em><a href=\"https:\/\/www.coindesk.com\/policy\/2025\/09\/09\/new-white-house-crypto-adviser-patrick-witt-calls-market-structure-bill-top-priority\">Read more<\/a>.<\/li>\n<\/ul>\n<div style=\"display:none\">Unknown block type &#8220;divider&#8221;, specify a component for it in the `components.types` option<\/div>\n<h3>Calendar<\/h3>\n<ul>\n<li>Sept. 22-28: <a href=\"https:\/\/koreablockchainweek.com\/\">Korea Blockchain Week<\/a>, Seoul<\/li>\n<li>Oct. 1-2: <a href=\"https:\/\/www.token2049.com\/?ref=fintechlabs.com\">Token2049<\/a>, Singapore<\/li>\n<li>Oct. 13-15: <a href=\"https:\/\/blockworks.co\/event\/digital-asset-summit-2025-london\">Digital Asset Summit<\/a>, London<\/li>\n<li>Oct. 16-17: <a href=\"https:\/\/eblockchainconvention.com\/european-blockchain-convention-11\/?utm_term=digital%20asset%20summit&amp;utm_campaign=EBC10+-+Sales&amp;utm_source=adwords&amp;utm_medium=ppc&amp;hsa_acc=7795475099&amp;hsa_cam=22659648651&amp;hsa_grp=182504557604&amp;hsa_ad=757796101592&amp;hsa_src=g&amp;hsa_tgt=kwd-756664361403&amp;hsa_kw=digital%20asset%20summit&amp;hsa_mt=p&amp;hsa_net=adwords&amp;hsa_ver=3&amp;gad_source=1&amp;gad_campaignid=22659648651&amp;gbraid=0AAAAAC9Vgcv7kVMuyv2WsnlQO_HO0LVCM&amp;gclid=CjwKCAjw7fzDBhA7EiwAOqJkh2gtq80AObKLUiIUyrjD8D4ao26d7C6xEBz-WXUHM7ly_psif2sn7BoCNfIQAvD_BwE\">European Blockchain Convention<\/a>, Barcelona<\/li>\n<li>Nov. 17-22: <a href=\"https:\/\/devconnect.org\/\">Devconnect<\/a>, Buenos Aires<\/li>\n<li>Dec. 11-13: <a href=\"https:\/\/solana.com\/breakpoint\">Solana Breakpoint<\/a>, Abu Dhabi<\/li>\n<li>Feb. 10-12, 2026: <a href=\"https:\/\/consensus-hongkong.coindesk.com\/\">Consensus<\/a>, Hong Kong<\/li>\n<li>Mar. 30-Apr. 2: <a href=\"https:\/\/ethcc.io\/\">EthCC<\/a>, Cannes<\/li>\n<li>May 5-7, 2026: <a href=\"https:\/\/consensus.coindesk.com\/\">Consensus<\/a>, Miami<\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to The Protocol, CoinDesk&#8217;s weekly wrap of the most important stories in cryptocurrency tech development. I\u2019m Margaux Nijkerk, a reporter at CoinDesk. In this issue: SwissBorg\u2019s SOL Earn Wallet Exploited for $41.5M After Partner&#8217;s API Is Compromised Ledger CTO Warns of NPM Supply-Chain Attack Hitting 1B+ Downloads Backpack Opens Regulated Perpetuals Exchange in Europe [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-46890","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/46890","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46890"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/46890\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46890"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46890"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46890"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}