The Solana-based decentralized exchange (DEX) Stabble issued a series of emergency social media warnings on Tuesday, urgently advising its liquidity providers (LPs) to withdraw their funds. The DEX posted on X, "EMERGENCY! Guys, please temporarily withdraw your liquidity instantly! Better safe than sorry."
The panic was triggered by blockchain investigator ZachXBT, who posted information hours earlier revealing that a North Korean developer had worked for years at Elemental, a Solana-based DeFi infrastructure project. Stabble's team quickly reposted ZachXBT's findings, which included a resume and photos of the alleged developer.
In response to user inquiries, Stabble clarified that the individual in question was not part of the current team. "It seems we had one year ago. We have a new team at Stabble that took over 4 weeks ago," the exchange stated. The team later emphasized that the warnings were purely precautionary, confirming no exploit had occurred. "There has been no exploit. We received a message and are acting on it. Our primary focus is the safety of our LPs," Stabble said, acknowledging criticism of their communication by adding, "We're not PR people, we're quants and early DeFi degens."
The incident occurs against a backdrop of heightened security concerns. U.S. authorities have warned about North Korean tech professionals using fake identities to infiltrate crypto companies. Furthermore, over the weekend, Drift Protocol indicated its $280 million exploit was likely executed by the same North Korea-aligned actors behind the Radiant Capital hack in October 2024.
The event underscores a growing risk layer in DeFi: operational and counterparty risk extending beyond code vulnerabilities to include developer access and team history, which can trigger immediate liquidity flight even without a confirmed breach.