{"id":8205,"date":"2026-04-08T10:07:42","date_gmt":"2026-04-08T10:07:42","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=8205"},"modified":"2026-04-08T10:07:42","modified_gmt":"2026-04-08T10:07:42","slug":"solana-dex-stabble-in-crisis-as-alleged-north-korean-hacker-link-sparks-1m-liquidity-exodus","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=8205","title":{"rendered":"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus"},"content":{"rendered":"<p><\/p>\n<div>\n<div id=\"blockquote-block_1ee1cb39c61382c97342a2827c8fd4e4\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Decentralised exchange Stabble urged users to \u201ctemporarily withdraw their liquidity immediately\u201d on April 7 after discovering that its former CTO, Keisuke Watanabe, was allegedly a North Korean operative.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Total value locked on Stabble fell from US$1.75 million to under US$663K, a 62% drop, within hours of the warning, even though no exploit was disclosed at the protocol itself.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The episode follows the US$285 million Drift Protocol exploit attributed to North Korea-linked actors, intensifying scrutiny of how DPRK IT workers are infiltrating crypto firms under false identities.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Solana-based decentralised exchange Stabble saw its total value locked (TVL) drop 62% after an on-chain investigator identified the protocol\u2019s former CTO as a suspected North Korean operative.<\/p>\n<p>This prompted an emergency withdrawal warning despite no confirmed exploit.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">EMERGENCY ! guys please temporally withdraw your liquidity instantly !<\/p>\n<p>Better safe than sorry. <\/p>\n<p>The new stabble team.<\/p>\n<p>\u2014 stabble (@stabbleorg) <a href=\"https:\/\/twitter.com\/stabbleorg\/status\/2041509913080352916?ref_src=twsrc%5Etfw\">April 7, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The alert followed disclosures by investigator ZachXBT, who linked former CTO Keisuke Watanabe to multiple aliases and wallet addresses across Solana and Ethereum, alongside an email and open-source intelligence evidence.\u00a0<\/p>\n<p>ZachXBT also said Watanabe had worked at Solana infrastructure project Elemental, leading to a separate dispute over how that project handled the alleged connection.<\/p>\n<p><strong>Read more Robert Kiyosaki Warns of Financial Crisis, Urges Shift to Bitcoin and Gold<\/strong><\/p>\n<h2 class=\"wp-block-heading\" id=\"h-dprk-infiltration-pressure-mounts\">DPRK Infiltration Pressure Mounts<\/h2>\n<p>Stabble\u2019s newly appointed operations team issued an urgent message roughly seven hours after the disclosure began circulating, advising liquidity providers to withdraw funds immediately as a precaution.\u00a0<\/p>\n<p>The team later confirmed it was responding to the warning and prioritising user safety.<\/p>\n<p>Liquidity providers reacted quickly. The protocol\u2019s TVL fell from about US$1.75 million (AU$2.54 million) to below US$663,000 (AU$961,350) within hours, as per DefiLlama. But Stabble reported no breach or vulnerability in its systems, with the outflows driven solely by concerns over the former employee\u2019s alleged ties.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-drift-protocol-flashbacks\">Drift Protocol Flashbacks<\/h2>\n<p>The incident comes amid heightened scrutiny of North Korea-linked activity in the crypto sector.\u00a0<\/p>\n<p>Days earlier, Drift Protocol disclosed a US$285 million (AU$413.25 million) exploit attributed to actors believed to be connected to the same group behind the Radiant Capital hack in October 2024.<\/p>\n<p>US authorities have warned that North Korean IT workers are increasingly using false identities to secure roles within crypto firms, sometimes redirecting earnings or establishing access that can later facilitate attacks.<\/p>\n<p>Stabble\u2019s current team has pledged to conduct new audits and provide transparency around Watanabe\u2019s hiring and access during his roughly one-year tenure.<\/p>\n<p><strong>Related: Bitcoin Traders Eye Sub-$60K Sweep as Market Tension Builds<\/strong><\/p>\n<\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>Hackers,North Korea,Solana#Solana #DEX #Stabble #Crisis #Alleged #North #Korean #Hacker #Link #Sparks #Liquidity #Exodus1775642862<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Decentralised exchange Stabble urged users to \u201ctemporarily withdraw their liquidity immediately\u201d on April 7 after discovering that its former CTO, Keisuke Watanabe, was allegedly a North Korean operative. Total value locked on Stabble fell from US$1.75 million to under US$663K, a 62% drop, within hours of the warning, even though no exploit was disclosed at<\/p>\n","protected":false},"author":1,"featured_media":8206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[3074,1569,2392,1078,2670,1137,3056,208,3401,152,2138,3873],"class_list":{"0":"post-8205","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bitcoin","8":"tag-alleged","9":"tag-crisis","10":"tag-dex","11":"tag-exodus","12":"tag-hacker","13":"tag-korean","14":"tag-link","15":"tag-liquidity","16":"tag-north","17":"tag-solana","18":"tag-sparks","19":"tag-stabble"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=8205\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus\" \/>\n<meta property=\"og:description\" content=\"Decentralised exchange Stabble urged users to \u201ctemporarily withdraw their liquidity immediately\u201d on April 7 after discovering that its former CTO, Keisuke Watanabe, was allegedly a North Korean operative. Total value locked on Stabble fell from US$1.75 million to under US$663K, a 62% drop, within hours of the warning, even though no exploit was disclosed at\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=8205\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-08T10:07:42+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=8205\",\"name\":\"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png\",\"datePublished\":\"2026-04-08T10:07:42+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=8205\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=8205#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=8205","og_locale":"en_US","og_type":"article","og_title":"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus","og_description":"Decentralised exchange Stabble urged users to \u201ctemporarily withdraw their liquidity immediately\u201d on April 7 after discovering that its former CTO, Keisuke Watanabe, was allegedly a North Korean operative. Total value locked on Stabble fell from US$1.75 million to under US$663K, a 62% drop, within hours of the warning, even though no exploit was disclosed at","og_url":"https:\/\/cryptonews.uk.com\/?p=8205","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-04-08T10:07:42+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=8205","url":"https:\/\/cryptonews.uk.com\/?p=8205","name":"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png","datePublished":"2026-04-08T10:07:42+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=8205#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=8205"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=8205#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/04\/100879.png","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=8205#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Solana DEX Stabble in Crisis as Alleged North Korean Hacker Link Sparks $1M Liquidity Exodus"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8205"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/8205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/8206"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}