SwissBorg Loses $41 Million in Solana Following Kiln API Breach

SwissBorg has lost about $41 million worth of Solana after a breach in a third-party API linked to its staking partner Kiln, which facilitated its SOL Earn programme. The incident affected fewer than 1% of users and represented roughly 2% of SwissBorg’s total assets under management.

The vulnerability originated in Kiln’s API — the software interface SwissBorg uses to communicate with Solana’s staking network. By exploiting that interface, attackers manipulated staking requests tied to the SOL Earn product and diverted approximately 192,600 SOL to an external wallet. SwissBorg and Kiln stated that the main SwissBorg app and all other Earn products remain secure. SwissBorg has paused Solana staking transactions while investigations continue.

SwissBorg CEO Cyrus Fazel described the event as “a bad day,” assuring customers that operations remain stable. The company pledged to reimburse all affected users, confirmed it has sufficient treasury reserves to cover losses, and is working with law enforcement, white-hat hackers, and security firms to block stolen transactions and trace funds. Some transfers have already been intercepted, according to its statement.

Kiln acknowledged that the breach involved “unauthorised access to a wallet used for staking operations.” SwissBorg and Kiln jointly activated their incident response protocols upon detection, aiming to contain the damage.

Industry experts flag this as yet another example of how dependence on external service providers exposes crypto platforms to infrastructure-level risk. In recent years, comparable API and smart-contract vulnerabilities have been exploited across the sector, prompting calls for more rigorous audits and redundancy in trust relationships.