In a significant turn of events, Solana’s decentralized exchange, Stabble, has directed its users to withdraw liquidity amid alarming revelations regarding its former chief technology officer. Recently identified as Keisuke Watanabe, he has been flagged as an alleged North Korean hacker, prompting immediate concern across the platform.
The announcement sparked a dramatic 62% plunge in Stabble’s total value locked (TVL), which fell from approximately $1.75 million to under $663,000 in a matter of hours following the warning. The new leadership of Stabble made an urgent plea on social media, stating, “EMERGENCY! Guys, please temporarily withdraw your liquidity instantly! Better safe than sorry.” This message was disseminated around 9:34 a.m. ET, shortly after a well-known on-chain investigator, ZachXBT, revealed the alarming connection to North Korea.
While Stabble has not reported any exploits on its platform, the new team emphasized that the safety of liquidity providers (LPs) remains their top priority. They are currently undertaking audits to ensure the platform is secure. “We received a message and are acting on it,” they stated. “We’re not PR people; we’re quants and early DeFi degens. We hear you, and your feedback matters.”
Their fast response draws particular significance given the recent exploit of the Drift Protocol—a leading DeFi protocol on Solana—where hackers allegedly drained over $285 million. This attack reportedly involved a complex scheme that spanned six months, where attackers used fake identities and in-person meetings to execute their plan with malicious developer tools.
The association between North Korean hackers and decentralized finance (DeFi) platforms is not new. Previous incidents include a staggering $1.4 billion hack of the crypto exchange Bybit, which remains the largest in crypto history. Furthermore, reports indicate that individuals believed to be from North Korea are actively attempting to gain employment at major exchanges like Binance.
In light of these ongoing cybersecurity threats, the Solana Foundation has recently initiated several new measures aimed at enhancing security within the ecosystem. These efforts focus on protecting DeFi protocols with a TVL of at least $10 million, underscoring a broader commitment to safeguarding the burgeoning DeFi landscape amid growing concerns over hacking activities attributed to state actors.


