Back to dashboard
Wednesday, February 11, 2026 at 22:18 UTC

SolFlare Pools

Pyth feed lag exploited for arbitrage drain.

Partial
Funds stolen
$19.40M
Recovered
$4.20M22%
Still outstanding
$15.20M
Chain
Solana
Category
DeFi
Attack vector
Oracle Manipulation
Reported by
PeckShield
Incident ID
e5

Exploit & recovery timeline

  1. Feb 11, 2026 · 20:18 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the oracle manipulation exploit against SolFlare Pools.

  2. Feb 11, 2026 · 22:18 UTC
    Exploit executed

    $19.4M drained from SolFlare Pools on Solana via Oracle Manipulation.

  3. Feb 11, 2026 · 23:18 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Feb 12, 2026 · 02:18 UTC
    Protocol response

    SolFlare Pools paused affected contracts or withdrawals and began tracing outbound flows.

  5. Feb 12, 2026 · 22:18 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Feb 18, 2026 · 22:18 UTC
    Partial recovery

    $4.2M of $19.4M recovered (22%); the remainder is still unaccounted for.

  7. Mar 13, 2026 · 22:18 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.