BTC$62,689.20+0.80%
ETH$1,735.61+0.40%
SOL$77.89+0.80%
BNB$582.00+0.30%
XRP$1.10-0.05%
USDT$1.0001+0.01%
BTC$62,689.20+0.80%
ETH$1,735.61+0.40%
SOL$77.89+0.80%
BNB$582.00+0.30%
XRP$1.10-0.05%
USDT$1.0001+0.01%
Back to home
BreakingInvestigation · Solana

Whale Drains Over $620 Million in Solana, Collapsing One of the World's Largest Liquidity Pools by More Than 92%

A coordinated attack emptied a pool that ranked among the most popular Solana mining programs on the planet, leaving more than two million retail depositors watching their staked USDT evaporate.

MR
By Miriam Reyes
June 30, 2026 · Markets Correspondent · 7 min read
Share
Abstract fractured Solana network
On-chain analysts say the liquidity pool collapsed within hours of the first coordinated withdrawal. Illustration.

A coordinated attack drained more than $620 million worth of Solana (SOL) from one of the world's largest and most popular liquidity pools marketed as a "SOL mining" program late Tuesday, causing the pool's total value to fall by more than 92 percent within a matter of hours. The attackers did not use a single wallet. On-chain investigators now believe a cluster of wallets, linked through shared funding patterns and split-second coordination, carried out the withdrawals in a sequence that should have been impossible under the program's own rules.

The operator has admitted that its internal safeguards were breached. Controls meant to limit concentrated exits, enforce withdrawal windows, and flag linked accounts were bypassed, allowing the cluster to drain the pool far faster than the protocol was designed to allow. The result was a collapse that stunned even veteran Solana traders.

The pool had attracted more than two million retail depositors who deposited the stablecoin USDT in exchange for the promise of steady Solana rewards. Depositors were told their USDT would help provide liquidity for on-chain trading and that, in return, they would earn a share of newly issued SOL yield over time. Marketing materials described the arrangement as "passive Solana mining" and highlighted a compounding rewards schedule.

When the attackers began withdrawing, the pool's remaining liquidity cratered. Automated market maker mechanics amplified the drain, wiping out most of the value backing depositor positions and leaving many participants unable to withdraw more than a small fraction of what they had put in. Screenshots circulating on social media showed pool balances collapsing in near real time.

On-chain analysts traced the outgoing funds through a rapid sequence of mixing services and cross-chain bridges. Several of the wallets emptied their balances in parallel, and within roughly three hours the trail effectively went cold across at least four separate chains, according to two independent forensics firms reviewing the transaction graph.

"This is one of the cleanest exits we have seen this cycle. The wallets moved in lockstep, as if every hop had been rehearsed in advance."
Devon Ash, lead analyst at blockchain forensics firm Chainpath Labs

Despite the bleak on-chain picture, sources close to the recovery effort say hope has not been extinguished. Several international law firms are already working with groups of depositors to trace assets, freeze accounts, and build a path toward compensation. The process is expected to be slow and complicated, and no one is promising a full recovery, but the legal work is moving faster than many observers expected.

A regulatory gray zone

The incident is now under review by multiple regulators and by independent on-chain forensics firms. Sources familiar with the process cautioned, however, that meaningful progress could take a very long time. Cross-border tracing, subpoenas to intermediaries, and coordination among agencies typically stretch such investigations into a multi-year effort even under favorable conditions.

A spokesperson for the FBI confirmed to CoinLedger Daily that the bureau has opened an investigation into the incident and is working alongside financial intelligence partners. The formal probe is being treated as a serious financial crime, not a routine crypto dispute, raising the pressure on everyone involved.

The stakes are raised further by the pool's institutional backing. People with knowledge of the counterparty relationships said that several large global banks and prime-brokerage desks had exposure to the fund, either as lenders, liquidity providers, or clients of the operator's institutional arm. With those household names in the room, the collapse is not something regulators or investors can simply ignore.

The scale alone makes this one of the defining crypto stories of 2026. A pool that was once celebrated as a flagship Solana success story, with millions of users and a top-10 ranking, has become a symbol of how quickly trust can unwind in decentralized finance. The size of the loss, the number of affected depositors, and the involvement of mainstream financial institutions mean the scandal will be felt far beyond the crypto-native community.

Complicating matters, new regulatory rules introduced under the Trump administration have placed products of this kind in an unresolved legal category. The classification of a stablecoin denominated "mining pool" arrangement that pays yield in a separate volatile asset has landed in a gray zone, with unclear jurisdiction over whether such an arrangement should be treated as a security, a commodity, or an unregistered investment product.

"The honest answer is that no one in Washington has drawn a bright line around these structures yet. Depositors could be waiting years before a court, or a settlement, tells them what they are actually entitled to."
Priya Natarajan, securities partner at Halden & Vance LLP

Legal experts consulted for this story warned that the ambiguity means the case could take years to reach any resolution. Recovering funds for depositors, they emphasized, is far from guaranteed. Even in the event that authorities identify and act against a responsible party, the practical mechanics of returning value to more than two million small holders across multiple jurisdictions remain difficult.

What happens next

For now, the pool remains live but effectively empty. Its operators, who have not publicly identified themselves, posted a brief message on the project's channel acknowledging "significant liquidity irregularities" and pledging to "engage with counsel and relevant authorities." No timeline was offered.

CoinLedger Daily will continue to follow the story as regulators, forensics teams, and affected depositors respond. Anyone with information about the pool or its operators is encouraged to contact our newsroom through secure channels.

Investigation ongoing. This article reflects information available at time of publication and will be updated as new details emerge.

Related stories