Key Takeaways
- Solana DEX “Stabble” urged all users to pull liquidity immediately after a former executive was linked to North Korea.
- The protocol’s Total Value Locked plummeted 62% in hours as users scrambled to secure their funds.
- Pseudonymous sleuth ZachXBT identified the former CTO as an alleged state-sponsored hacker, triggering the panic.
Trust in DeFi is fragile, and for the Solana-based exchange Stabble, it shattered in a single morning. On Tuesday, the protocol team issued an “EMERGENCY” alert on social media, telling liquidity providers to withdraw their assets instantly.
The reason? A bombshell revelation that their former Chief Technology Officer, known as Keisuke Watanabe, was allegedly a North Korean operative. While no exploit had actually occurred, the mere ghost of the DPRK in the server room was enough to send $1 million in liquidity out the door in less than a day.
A factual summary of the Stabble North Korean hacker scare
The panic started when on-chain sleuth ZachXBT connected Watanabe to North Korean hacking groups. This news hit like a ton of bricks, especially since it’s only been a week since Drift Protocol was drained of $285 million in a nearly identical ‘long-con.’ In that case, the attackers spent half a year playing the part—faking resumes and even showing up to conferences—just to plant their malicious code.
Instead of hiding behind PR talk, Stabble’s new management (who call themselves ‘quants and DeFi degens’) chose total transparency. They essentially nuked their own TVL to keep users safe while they scrub every line of code. It’s a harsh reality check for Solana: North Korean hackers aren’t just breaking in anymore; they’re getting hired. Whether it’s the $1.4 billion hit at Bybit or agents trying to slip into Binance, the threat is now coming from inside the house.
Final Thoughts
In DeFi, “Better safe than sorry” is more than a cliché—it’s a survival strategy. Stabble’s 62% TVL drop is a small price to pay if it prevents a total drain at the hands of state-sponsored actors.
Frequently Asked Questions
Was Stabble actually hacked?
No exploit was reported, but users were told to withdraw as a precaution due to the CTO’s alleged background.
Who is ZachXBT?
A famous pseudonymous on-chain investigator known for uncovering crypto scams and North Korean hacking links.
How do North Koreans get hired by crypto firms?
They often use fabricated professional identities and high-quality “verifiable” backgrounds to pass HR checks.
