Fast Facts

• SwissBorg lost over $41 million in Solana cryptocurrency after a cyberattack on a partner’s wallet.
• About 1% of SwissBorg users were directly affected; the stolen funds represent 2% of the platform’s assets.
• The breach originated from Kiln, a crypto infrastructure partner, via a compromised API.
• SwissBorg paused Solana staking and pledged to fully reimburse all affected customers.
• Over $2 billion in cryptocurrency thefts have occurred globally in the first half of 2025.

A Digital Bank Heist, 21st Century Style

Picture a digital bank vault, humming with invisible coins-until a silent alarm triggers, and millions vanish in seconds. This week, SwissBorg, a prominent European cryptocurrency platform, found itself at the epicenter of a $41 million cyber heist. The loot: nearly 193,000 Solana (SOL) coins, spirited away not from SwissBorg’s own platform, but through a partner’s compromised wallet.

The breach didn’t target SwissBorg’s main systems. Instead, it slipped through a backdoor: an external “decentralized finance” (DeFi) wallet managed by Kiln, a crypto infrastructure firm. Hackers exploited Kiln’s application programming interface (API)-the software bridge that lets SwissBorg communicate with Solana’s blockchain-much like thieves finding a weak link in the bank’s armored delivery service rather than the vault itself.

The Anatomy of the Attack

The attack began with unauthorized access to a wallet used for staking operations-where users’ crypto is locked up to help run the network and earn rewards. Once inside, the hackers siphoned off the funds with surgical precision. SwissBorg and Kiln detected the breach quickly, activating emergency protocols and halting all Solana staking on the platform. Blockchain sleuths and security firms, including Chainalysis and independent investigator ZachXBT, were enlisted to trace the stolen coins.

While SwissBorg’s CEO Cyrus Fazel reassured users that only 1% of customers were affected and promised full compensation, the scale and speed of the theft are sobering. The company is now working with law enforcement agencies worldwide, and some transactions have reportedly been blocked as exchanges rally to stem the outflow.

Crypto’s Ongoing Security Saga

This isn’t an isolated incident. In the Wild West of digital finance, breaches like this are becoming alarmingly routine. Just weeks ago, a Turkish crypto platform lost $49 million in a similar attack. According to Chainalysis, hackers have already stolen over $2 billion in cryptocurrency in the first half of 2025 alone, underscoring how lucrative-and vulnerable-the sector remains.

The SwissBorg case highlights the tangled web of trust in crypto: even if your main platform is secure, partners and third-party tools can become weak links. APIs, the digital equivalent of service entrances, are increasingly targeted by cybercriminals probing for overlooked vulnerabilities. For users, the promise of decentralization can sometimes mean exposure to risks far beyond their control.

WIKICROOK

• API (Application Programming Interface): An API is a set of rules that lets different software systems communicate, acting as a bridge between apps. APIs are common cybersecurity targets.
• DeFi (Decentralized Finance): DeFi (Decentralized Finance) offers financial services like lending and trading on blockchain networks, removing the need for banks or central authorities.
• Staking: Staking means locking up cryptocurrency to help run a blockchain network, often earning rewards, but with potential risks if network security is weak.
• Solana (SOL): Solana (SOL) is a popular blockchain and cryptocurrency known for fast transactions, low fees, and was a main asset in the SwissBorg breach.
• Blockchain Security Firm: A blockchain security firm specializes in tracking, analyzing, and protecting digital assets on blockchains, acting as digital detectives in the crypto world.