Solana-based DeFi protocol DeFiTuna says an attacker exploited its lending pools, extracting approximately $580,000 and leaving its $USDC lending pool with an equal deficit.
In a statement shared by the team, DeFiTuna said the exploit occurred early Thursday morning. The protocol stated that it identified and mitigated the attack vector, while investigations remain ongoing. The team also said it is working to recover the stolen funds and will release additional information as the investigation progresses.
Another Setback for Solana DeFi
The exploit adds to a difficult period for Solana's DeFi ecosystem. The network is still recovering from the approximately $285 million Drift Protocol hack on April 1. Since then, the network has lost nearly $1.5 billion in TVL.
The most recent major incident involving a Solana protocol came earlier this month, when BonkDAO lost roughly $20 million after a malicious governance proposal transferred treasury funds to an attacker. BonkDAO has since pursued legal action against the individual behind the proposal.
Crypto Hacks Continue To Pile Up
The DeFiTuna exploit arrives as crypto security incidents continue at a steady pace across the industry. According to DefiLlama's tracker, the total value lost to crypto hacks now exceeds $16.7 billion. There has been 10 hacks recorded so far in July alone.
Yesterday, July 15, Arbitrum-based perpetuals exchange Ostium suffered an exploit worth roughly $23 million. Blockchain data indicates that the attacker swapped the stolen assets for approximately 12,085 $ETH shortly after the attack.
A July 1 report from TRM Labs showed that attackers carried out a record 207 crypto hacks during the first half of 2026. Despite the record number of incidents, total losses reached $972 million, less than half of the $2.3 billion stolen during the first half of 2025.
The report found that smart contract exploits accounted for most incidents, while infrastructure compromises caused the largest financial losses. North Korea-linked attacks against Drift Protocol and KelpDAO alone represented roughly $577 million in losses during the first half of the year.
Security Efforts Continue to Evolve
The latest exploit comes on the same day Certora highlighted the results of its formal verification of Solana's SPL Stake Pool program, a program helping manage approximately $8.45 billion in staked $SOL.
Certora said its combination of manual auditing and formal verification uncovered 15 previously unidentified issues and established 11 mathematical safety invariants for the protocol. According to the firm, the Solana Stake Pool team addressed all critical findings and implemented fixes promptly.
The audit illustrates how mathematical verification can identify structural risks that traditional testing may overlook. However, concerns over the future of DeFi security have intensified as artificial intelligence tools become more capable of identifying vulnerabilities.
OpenZeppelin founder Manuel Aráoz recently declared that “all of DeFi is unsafe”, warning that coding agents could become powerful tools for discovering and exploiting smart contract weaknesses. Aráoz, whose former company, OpenZeppelin, helped establish one of crypto's largest open-source security standards, argued that increasingly advanced AI models could accelerate the discovery of vulnerabilities across decentralized applications.
Security firms have increasingly promoted formal verification as a potential defense against AI-assisted attacks. Companies such as Certora argue that mathematically proving contract behavior can address risks that traditional audits may miss, a view that has also received support from Ethereum co-founder Vitalik Buterin.
As investigations into DeFiTuna continue, the incident adds another data point to a year that has seen persistent crypto exploits, while the industry continues searching for stronger defenses against both existing and emerging security threats.
Read More on SolanaFloor
Zeta Winds Down $ZEX, Cancels Promised 1:1 Migration to $BULLET
Solana RWA Holders Hit 300K ATH as Network Takes No. 1 Spot
What's Next For Crypto If CLARITY Fails?
