- Stabble urged users to withdraw liquidity after a former executive was identified as an alleged North Korean hacker.
- The protocol’s total value locked fell from about $1.75 million to under $663,000 after the warning.
Stabble, a decentralized exchange on Solana, told users to pull liquidity on Tuesday after a former executive was publicly identified as an alleged North Korean operative, setting off a sharp and immediate retreat from the platform.
The warning came from the protocol’s new team, which posted an emergency message urging liquidity providers to withdraw “better safe than sorry.” The alert landed roughly seven hours after onchain investigator ZachXBT identified Keisuke Watanabe, who reportedly served as Stabble’s CTO last year, as an alleged North Korean hacker.
Liquidity fled first, facts came second
That was enough to trigger a fast response from users. According to reporting and DeFiLlama-linked figures cited publicly, Stabble started the day with around $1.75 million in total value locked. After the warning, that figure fell to less than $663,000, a drop of roughly 62%.
There is, at least so far, no confirmed exploit tied directly to Stabble itself. That point matters. The panic was driven by counterparty and personnel risk, not by evidence that protocol funds had already been drained. Still, in crypto, suspicion alone can empty a pool quickly, especially when North Korean-linked actors are involved.
A personnel scare becomes a protocol stress test
The incident also lands at an awkward moment for the exchange. Public reports say Stabble was recently taken over by a new team, meaning the protocol was already in a transitional phase when the alarm hit.
That makes the episode less about one wallet or one suspicious transfer and more about trust in operating history. In decentralized markets, teams often talk about smart contract risk, oracle risk and liquidity risk. But human risk, who built the system, who touched it, who had access, still has a habit of surfacing at the worst possible time.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
FBI teams up with Indonesia to dismantle W3LL phishing network, with more than $20 million involved
The U.S. FBI and Indonesian police successfully cooperated to dismantle a W3LL phishing network, seizing related equipment and detaining suspects. The W3LL phishing toolkit offers low-priced fake login pages that use man-in-the-middle attacks to easily bypass multi-factor authentication, forming an organized cybercrime ecosystem. This operation marks cooperation between the U.S. and Indonesia in law enforcement against cybercrime; however, the security threats to cryptocurrency users remain severe.
MarketWhisper2h ago
Squads Emergency Alert: Address poisoning and forged multisig accounts; a whitelist mechanism will go live
Solana ecosystem multi-signature agreement Squads issued a warning, pointing out that attackers launched an address poisoning attack against users by using fake accounts to trick users into making unauthorized transfers. Squads confirmed that there was no loss of funds and emphasized that this is a social engineering attack rather than a protocol vulnerability. To respond, Squads has implemented protective measures such as a warning system, non-interactive account prompts, and a whitelist mechanism. This incident reflects the growing social engineering threats in the Solana ecosystem and has prompted ongoing security reviews.
MarketWhisper2h ago
South Korean “retaliation intermediary” agencies charged USDT to carry out violent crimes, and continued operating even after the main suspect was arrested
South Korea has recently seen multiple “revenge intermediary” organizations that use cryptocurrency as a payment method. They offer intimidation and murder services via Telegram. Even though the main culprit has been arrested, related advertisements are still being posted. Police are investigating more than 50 cases and have arrested about 30 people.
GateNews4h ago
Fake Ledger App on Apple’s App Store Drains Musician’s 5.9 BTC Retirement Fund
A fake Ledger app on Apple's App Store deceived musician Garrett Dutton into losing 5.9 BTC by entering his seed phrase. This case highlights ongoing wallet scams and the exploitation of trust, as the stolen bitcoin was laundered through KuCoin.
CryptoNewsFlash8h ago
A CEX Faces Extortion and Refuses to Back Down: Affects About 2,000 Accounts, Customer Funds Are Not at Risk
A certain cryptocurrency exchange was extorted by a criminal organization, which claimed it would release internal system access videos. The exchange confirmed it had not suffered a systemic breach, that customer funds are safe, and that due to improper conduct by customer service personnel, data from approximately 2,000 accounts was accessed. The exchange has revoked the relevant permissions and strengthened security controls. The company is working with law enforcement agencies to investigate.
GateNews12h ago
Solana cofounder toly: a base-layer stablecoin should be built that can only be frozen with authorization from the court
Solana co-founder toly noted that the industry needs a stablecoin that can only be frozen under a court order, opposing other freeze factors. He suggested that the protocol issue a stablecoin with custom freeze strategies on the base layer and strengthen security measures. This view stems from a recent response by Circle to the Drift protocol hack incident, sparking discussions about centralized stablecoins.
GateNews12h ago
