SwissBorg (Kiln staking) hack on 2025-09-08
Hack on Solana, 8 Sep 2025. Last verified 4 Nov 2026.
major
Reported loss
Not in USD
see the amount as stated below
Recovered
-
nothing reported
Status
Not recovered
updated 26 Oct 2026
Date
Solana
Summary
On 2025-09-08 a malicious payload injected into the API of staking provider Kiln, after a Kiln engineer's GitHub access token was compromised, altered an unstaking transaction and moved control of over 192,000 SOL staked via SwissBorg to the attackers. SwissBorg later marked the affected SOL staking strategy with a 97.7675% loss and started support grants.
- Protocol
- SwissBorg (Kiln staking)
- Type
- Hack
- Reported loss
- over 192,000 SOL
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | September 8th, 2025 | swissborg.com ↗ |
| Amount | over 192,000 SOL | swissborg.com ↗ |
| Cause | compromised GitHub access token of a Kiln engineer | swissborg.com ↗ |
| Kiln statement | 8th September 2025 | kiln.fi ↗ |
| Loss marked | 97.7675% loss | swissborg.com ↗ |
Primary sources
- SwissBorg: Security information about the Kiln breach ↗ post-mortem · accessed 2026-11-04
- Kiln: SOL incident & SwissBorg announcement ↗ official announcement · accessed 2026-11-04
- SwissBorg: Next steps in the Solana support grant ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram