What happened in the Solv Protocol $2.7M exploit?

Bitcoin DeFi platform Solv Protocol reported that one of its token vaults was exploited, resulting in about $2.7 million in losses. The attacker allegedly used a smart contract vulnerability to mint tokens and convert them into 38.05 SolvBTC. SolvBTC is a token pegged to Bitcoin used within the platform’s ecosystem. The protocol said fewer than 10 users were affected.

How did the Solv Protocol hack work?

Security researchers said the attacker exploited a bug that allowed excessive token minting. The vulnerability reportedly enabled the hacker to mint tokens repeatedly before swapping them for SolvBTC. According to CD Security co-founder Chris Dior, the exploit was triggered 22 times. This allowed the attacker to extract the equivalent of about 38 SolvBTC.

What is a re-entrancy attack in DeFi?

A re-entrancy attack occurs when a smart contract allows repeated calls before completing a transaction. This can let attackers repeatedly withdraw or mint tokens using the same transaction logic. Pseudonymous researcher Pyro suggested the Solv exploit resembled this type of vulnerability. Re-entrancy bugs have historically been one of the most common attack vectors in DeFi.

What is SolvBTC in the Solv Protocol ecosystem?

SolvBTC is a token pegged to Bitcoin within the Solv Protocol platform. Users deposit Bitcoin and receive SolvBTC, which can then be used across DeFi applications such as lending, borrowing, or staking. This structure allows Bitcoin holders to participate in decentralised finance activities. The stolen funds in the exploit were denominated in SolvBTC.

How much Bitcoin does Solv Protocol manage?

Solv Protocol says it holds about 24,226 Bitcoin on-chain. At current market prices, that reserve is worth more than $1.7 billion. The project describes this as the largest on-chain Bitcoin reserve in its category. The exploit affected only a small portion of that total.

How many users were affected by the Solv Protocol exploit?

Solv Protocol said fewer than 10 users were impacted by the attack. The platform also stated it would cover the full loss of the affected 38.05 SolvBTC. This means users should not suffer direct financial losses from the exploit. Covering user losses is a common step projects take to maintain trust after security incidents.

Why did Solv Protocol offer the hacker a 10% bounty?

Solv Protocol offered the attacker a 10% bounty as an incentive to return the stolen funds. This approach is often called a “white hat bounty” in crypto security. The idea is to encourage hackers to return funds in exchange for keeping a portion as a reward. Many DeFi projects use this strategy after exploits.

Which security firms are investigating the Solv Protocol exploit?

Solv Protocol said it is working with several blockchain security firms to investigate the attack. These include Hypernative Labs, SlowMist, and CertiK. These companies specialise in smart contract security analysis and blockchain monitoring. Their role is to identify the root cause of the exploit and prevent similar incidents.

Image for illustrative purposes only. Not a real photo.

Solv Protocol offers bounty after $2.7M exploit

Written by Mahathir BayenaPublished Mar 6, 2026, 12:00 AM

Bitcoin-based decentralised finance platform Solv Protocol said one of its token vaults was exploited for about $2.7 million and offered the attacker a 10% bounty to return the stolen funds.

The project said fewer than 10 users were affected and confirmed it would cover losses totaling 38.05 SolvBTC, a Bitcoin-pegged token used within its ecosystem.

Solv said it is investigating the exploit alongside security firms Hypernative Labs, SlowMist and CertiK.

Security researchers said the attacker exploited a vulnerability in a smart contract that allowed excessive minting of tokens used in the protocol.

According to CD Security co-founder Chris Dior, the hacker triggered the vulnerability 22 times before swapping the newly minted tokens for just over 38 SolvBTC.

Pseudonymous researcher Pyro said the attack resembled a re-entrancy exploit, a well-known smart contract vulnerability that has affected several DeFi platforms.

Solv has published an Ethereum wallet address inviting the attacker to claim a 10% bounty if the stolen funds are returned.

At the time of reporting, Bitcoin price was $70,589.42.