# SwissBorg Earnings Program Breached via Partner API ∞ Security

**Published:** 2025-09-16
**Categories:** Security

---

![The image showcases a detailed, high-tech arrangement of metallic hexagonal and rectangular units, accented with vibrant electric blue elements and interconnected by numerous black cables. These components are arranged in a dense, structured pattern, suggesting a sophisticated computational or networking system designed for high throughput](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-ledger-architecture-interoperability-network-consensus-infrastructure.jpeg)

![A close-up view highlights a futuristic in-ear monitor, featuring a translucent deep blue inner casing with intricate internal components and clear outer shell. Polished silver metallic connectors are visible, contrasting against the blue and transparent materials, set against a soft grey background](https://incrypthos.com/wp-content/uploads/2025/09/transparent-web3-audio-gateway-immutable-ledger-integration.jpeg)

## Briefing

The SwissBorg crypto platform experienced a significant security incident, resulting in a $41 million loss of Solana tokens from its earnings program. This breach stemmed from the exploitation of a partner API, underscoring the systemic risk introduced by [third-party integrations](https://incrypthos.com/security/swissborg-solana-earn-program-suffers-41m-third-party-api-exploit/). SwissBorg confirmed the incident did not directly compromise its core application. The protocol is leveraging its SOL treasury to cover affected user balances, aiming for full reimbursement.

![The visual presents an abstract composition of metallic and translucent geometric forms set against a gradient blue background. On the left, soft, blurred circular shapes recede into the background, while the right features a prominent silver arc partially encircling a complex, multi-layered blue ring structure with several thin, transparent orbital rings](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-protocol-architecture-digital-asset-interoperability-framework.jpeg)

## Context

Prior to this incident, the [digital asset](https://incrypthos.com/news/digital-asset/) ecosystem has seen increasing attack vectors targeting external integrations and supply chain vulnerabilities. Centralized platforms often rely on numerous third-party APIs for extended functionality, expanding their attack surface beyond internal codebases. This reliance introduces a critical dependency where the security posture of the weakest link dictates overall resilience.

![A high-resolution image displays a white and blue modular electronic component, featuring a central processing unit CPU or an Application-Specific Integrated Circuit ASIC embedded within its structure. The component is connected to a larger, blurred system of similar design, emphasizing its role as an integral part of a complex technological setup](https://incrypthos.com/wp-content/uploads/2025/09/modular-asic-node-facilitating-decentralized-ledger-transaction-integrity.jpeg)

## Analysis

The incident involved the exploitation of a partner API connected to SwissBorg’s [earnings program](https://incrypthos.com/security/swissborg-earnings-program-exploited-41-million-solana-tokens-lost/). Attackers leveraged this external interface to illicitly transfer approximately $41 million in Solana tokens. The compromise demonstrates how vulnerabilities in interconnected systems can be weaponized, even when core protocol smart contracts remain uncompromised. This attack bypassed direct application security by targeting an adjacent, less fortified access point, enabling the unauthorized asset drain.

![The image displays an intricate modular system featuring transparent blue conduits and polished silver metallic components. This close-up view emphasizes the precise engineering of a decentralized network](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-network-architecture-blockchain-protocol-execution-validator-nodes.jpeg)

## Parameters

- **Protocol Targeted** ∞ SwissBorg [Earnings](https://incrypthos.com/news/earnings/) Program

- **Attack Vector** ∞ Partner [API](https://incrypthos.com/news/api/) Exploitation

- **Financial Impact** ∞ $41.3 Million

- **Blockchain Affected** ∞ [Solana](https://incrypthos.com/news/solana/)

- **Affected Assets** ∞ SOL Tokens

- **Confirmed By** ∞ ZachXBT

![The image displays an intricate arrangement of electronic components, characterized by metallic silver and dark grey modules intertwined with translucent blue and clear tubular structures. This complex hardware configuration evokes the sophisticated infrastructure underpinning modern cryptocurrency networks](https://incrypthos.com/wp-content/uploads/2025/09/advanced-dlt-infrastructure-cryptographic-hashing-engine-architecture.jpeg)

## Outlook

Immediate mitigation for users involves reviewing exposure to third-party integrations across all digital asset platforms. This incident highlights the imperative for rigorous security audits and continuous monitoring of all external APIs and integrated services. Protocols must implement enhanced due diligence for third-party partners and establish robust access control mechanisms to prevent similar breaches. The event will likely drive new standards for API security and [supply chain](https://incrypthos.com/security/javascript-supply-chain-attack-hijacks-crypto-transactions-across-chains/) risk management within the crypto industry.

![A translucent blue device with a smooth, rounded form factor is depicted against a light grey background. Two clear, rounded protrusions, possibly interactive buttons, and a dark rectangular insert are visible on its surface](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-identity-hardware-wallet-cryptographic-primitive.jpeg)

## Verdict

**This $41 million breach underscores the critical and often underestimated risk posed by [third-party](https://incrypthos.com/news/third-party/) API dependencies, demanding a paradigm shift towards comprehensive supply chain security in the digital asset landscape.**

Signal Acquired from ∞ <a href="https://www.bankinfosecurity.com/cryptohack-roundup-swissborgs-41m-exploit-a-29417?utm_source=incrypthos.com&utm_medium=referral&utm_campaign=noo-engine.com" target="_blank" rel="nofollow">bankinfosecurity.com</a>

## Glossary

<a href="https://incrypthos.com/security/swissborg-solana-earn-program-suffers-41m-third-party-api-exploit/" class="glossary-item-box">

## third-party integrations 

A compromised third-party staking API allowed attackers to manipulate requests, siphoning $41 million in SOL from the SwissBorg Earn program. </a><a href="https://incrypthos.com/news/digital-asset/" class="glossary-item-box">

## digital asset 

Definition ∞ A digital asset is a digital representation of value that can be owned, transferred, and traded. </a><a href="https://incrypthos.com/security/swissborg-earnings-program-exploited-41-million-solana-tokens-lost/" class="glossary-item-box">

## earnings program 

Partner API compromise enabled significant asset exfiltration, exposing critical third-party integration risks. </a><a href="https://incrypthos.com/news/earnings/" class="glossary-item-box">

## earnings 

Definition ∞ Earnings represent the revenue or profit generated from participating in decentralized finance (DeFi) protocols or blockchain-based activities. </a><a href="https://incrypthos.com/news/api/" class="glossary-item-box">

## api 

Definition ∞ An API, or Application Programming Interface, is a set of rules and protocols that allows different software applications to communicate with each other. </a><a href="https://incrypthos.com/news/solana/" class="glossary-item-box">

## solana 

Definition ∞ Solana is a high-performance blockchain platform designed to support decentralized applications and cryptocurrencies with exceptional speed and low transaction costs. </a><a href="https://incrypthos.com/security/javascript-supply-chain-attack-hijacks-crypto-transactions-across-chains/" class="glossary-item-box">

## supply chain 

Attackers compromise widely used JavaScript packages, replacing legitimate crypto transaction destinations with malicious addresses, posing an immediate threat to asset integrity. </a><a href="https://incrypthos.com/news/third-party/" class="glossary-item-box">

## third-party 

Definition ∞ A 'third-party' in the cryptocurrency ecosystem is an entity or individual that is not directly involved in a specific transaction or protocol interaction but plays a role in facilitating or verifying it. </a>

**Tags:** [Financial Loss](https://incrypthos.com/news/financial-loss/), [Token Drain](https://incrypthos.com/news/token-drain/), [Third-Party Risk](https://incrypthos.com/news/third-party-risk/), [Solana](https://incrypthos.com/news/solana/), [Crypto Breach](https://incrypthos.com/news/crypto-breach/), [Security](https://incrypthos.com/news/security/)	

## Discover More

- 
### [Polkadot DAO Caps DOT Supply at 2.1 Billion](https://incrypthos.com/web3/polkadot-dao-caps-dot-supply-at-2-1-billion/)
![A sleek, metallic structure, possibly a hardware wallet or node component, features two embedded circular modules depicting a cratered lunar surface in cool blue tones. This visual metaphor signifies moonshot potential within the decentralized finance DeFi ecosystem. The reflective surfaces imply on-chain transparency and data integrity, crucial for blockchain operations. The deep blue, star-speckled background evokes the vast Web3 frontier, highlighting the pursuit of scalability solutions and interoperability protocols to achieve exponential growth for digital assets and utility tokens. This design embodies the ambition for groundbreaking protocol innovation.](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-finance-lunar-trajectory-protocol-scalability-solutions.jpeg)

Polkadot's community-driven tokenomics revision introduces a hard supply cap, enhancing scarcity and aligning with institutional investment theses.

- 
### [Nemo Protocol Developer Deployed Unaudited Code, Enabling $2.6m Exploit](https://incrypthos.com/security/nemo-protocol-developer-deployed-unaudited-code-enabling-2-6m-exploit/)
![Advanced semiconductor architecture is depicted, showing dark printed circuit board traces and numerous surface-mounted components. Prominent metallic heatsinks, with reflective blue and white geometric designs, dominate the foreground, signifying robust thermal management critical for high-performance computing. This hardware backbone is essential for blockchain node operations, facilitating cryptographic hashing and transaction validation. Such advanced chip architecture underpins Proof-of-Work mining rigs or Proof-of-Stake validator hardware, ensuring network security and data integrity within a decentralized ledger technology ecosystem. It represents the physical layer for smart contract execution and digital asset processing.](https://incrypthos.com/wp-content/uploads/2025/09/precision-engineered-hardware-driving-cryptographic-operations-for-blockchain-dlt.jpeg)

An unaudited code deployment enabled a flash loan and state manipulation attack, compromising Nemo Protocol and jeopardizing user assets.

- 
### [Solana Enhances Network Capacity, Explores Six-Second Block Times](https://incrypthos.com/tech/solana-enhances-network-capacity-explores-six-second-block-times/)
![Two white, textured, modular components are shown connecting, revealing intricate internal mechanisms. A central cubic unit aligns with a larger block, while a similar mechanism is visible within another block. Both exposed interfaces feature metallic gears meshed with numerous translucent blue, crystalline-like cubic elements. This visual metaphor illustrates a modular blockchain architecture facilitating interoperability via a cross-chain bridge. The crystalline elements represent tokenized utility or digital assets processed by a decentralized consensus mechanism. This setup suggests network orchestration for scalable throughput and transaction finality within a distributed ledger technology ecosystem, vital for corporate crypto and dApp functionality.](https://incrypthos.com/wp-content/uploads/2025/09/modular-blockchain-interoperability-mechanism-tokenized-asset-transfer.jpeg)

The protocol architecturally scales transaction throughput via increased Compute Unit limits and evaluates a shift to six-second block times, optimizing execution layer efficiency.

- 
### [Formalizing Maximal Extractable Value for Blockchain Security](https://incrypthos.com/research/formalizing-maximal-extractable-value-for-blockchain-security/)
![A polished metallic square plate, featuring a layered circular component, is encased within a translucent, wavy, blue-tinted material. This design represents a cryptographic secure element, vital for digital asset security. It functions as a hardware wallet component, safeguarding private keys and seed phrases in cold storage. The resilient enclosure ensures tamper-proof protection for blockchain infrastructure, enabling secure transaction signing for decentralized finance and managing tokenized assets.](https://incrypthos.com/wp-content/uploads/2025/09/blockchain-security-hardware-module-for-immutable-asset-protection.jpeg)

This research establishes a formal theory for Maximal Extractable Value (MEV), providing a foundational framework to analyze and mitigate economic attacks on public blockchains.

- 
### [JP Morgan Pilots JPMD Deposit Token on Coinbase’s Base](https://incrypthos.com/adoption/jp-morgan-pilots-jpmd-deposit-token-on-coinbases-base/)
![A futuristic mechanical interface depicts a dynamic data transformation process. Two sophisticated cylindrical components, one metallic and one white segmented, interact at their nexus. A burst of vibrant blue, cubic digital assets or data packets explodes outwards, accompanied by a frothy dispersion of white, potentially representing raw data streams or computational noise. This visual metaphor illustrates complex cryptographic operations, such as transaction validation, data serialization, or smart contract execution, highlighting efficient protocol mechanisms transforming inputs into verifiable outputs within a DLT ecosystem.](https://incrypthos.com/wp-content/uploads/2025/09/cryptographic-hashing-protocol-data-transformation-engine-dynamics.jpeg)

JP Morgan leverages Base for JPMD deposit tokens, enabling institutional clients to achieve near-instantaneous payment settlement and enhanced capital efficiency.

- 
### [Multi-Sig Wallet Drained via Sophisticated Phishing Attack](https://incrypthos.com/security/multi-sig-wallet-drained-via-sophisticated-phishing-attack/)
![Close-up view of interconnected, robust cryptographic hardware components. A translucent blue module, possibly a polymer casing, encases a brushed metallic secure element, central to private key storage. Adjacent is a metallic housing, exhibiting a textured finish and circular indentations, suggesting a sensor or interface for blockchain node attestation. This modular design emphasizes physical security token functionality and cold storage capabilities, crucial for non-custodial asset management and tamper-evident protection within decentralized finance infrastructure.](https://incrypthos.com/wp-content/uploads/2025/09/cryptographic-hardware-wallet-secure-element-physical-security-token.jpeg)

A meticulously crafted phishing scheme exploited a multi-signature wallet, leveraging disguised approvals to siphon over $3 million in USDC from an unsuspecting investor.

- 
### [SwissBorg Solana Earn Program Suffers $41m Third-Party API Exploit](https://incrypthos.com/security/swissborg-solana-earn-program-suffers-41m-third-party-api-exploit/)
![Abstract layers of frosted, granular grey-white material frame a vibrant, deep blue core, suggesting a robust blockchain architecture. Distinct parallel structures evoke secure enclave components within a distributed ledger technology framework. An organic indentation reveals the blue, symbolizing data encryption or a cryptographic primitive within a hardware wallet. This visual metaphor illustrates multi-party computation processes, emphasizing the secure management of digital asset private keys and the underlying interoperability protocol for transaction finality. The composition subtly hints at layer-2 scaling solutions and robust consensus mechanism elements.](https://incrypthos.com/wp-content/uploads/2025/09/frosted-blockchain-architecture-secure-multi-party-computation-visual.jpeg)

A compromised third-party staking API allowed attackers to manipulate requests, siphoning $41 million in SOL from the SwissBorg Earn program.

- 
### [Crypto Market Anticipates Fed Rate Cut, Bitcoin Holds Steady](https://incrypthos.com/markets/crypto-market-anticipates-fed-rate-cut-bitcoin-holds-steady/)
![A dynamic representation of digital asset flow within a sophisticated blockchain architecture. Transparent conduits guide a vibrant blue, granular substance, interspersed with white particulate matter, symbolizing data streams or computational power. White spheres, potentially representing individual transactions or validator nodes, navigate these channels. The composition evokes advanced protocol execution, cryptographic hashing, and efficient transaction validation across a distributed ledger technology. This visual metaphor highlights network throughput, liquidity pool dynamics, and Web3 infrastructure, emphasizing scalability and interoperability.](https://incrypthos.com/wp-content/uploads/2025/09/decentralized-ledger-flow-optimizing-blockchain-protocol-efficiency.jpeg)

The crypto market is holding its breath for the Fed's rate cut signals, fueling altcoin interest while Bitcoin stabilizes near $115,300.

- 
### [Ethereum Pectra Upgrade Integrates Account Abstraction and Staking Refinements](https://incrypthos.com/tech/ethereum-pectra-upgrade-integrates-account-abstraction-and-staking-refinements/)
![A sophisticated modular hardware unit displays brushed metallic surfaces and translucent blue components, illuminated by internal azure glows. This intricate design suggests a high-performance decentralized processing unit, potentially housing a secure enclave for cryptographic operations. Transparent elements visualize data packet flow, indicative of a Layer 2 scaling solution or cross-chain communication protocol. Its robust architecture supports efficient transaction finality and off-chain computation, critical for advanced smart contract execution environments. The integrated components signify a validator node's core functionality within a distributed ledger technology framework, emphasizing interoperability.](https://incrypthos.com/wp-content/uploads/2025/09/modular-blockchain-hardware-secure-enclave-interoperability-protocol-visualization.jpeg)

The Pectra upgrade advances Ethereum's modular architecture, enhancing user experience through account abstraction and optimizing staking mechanics for network resilience.

**Tags:** [API](https://incrypthos.com/news/api/), [API Security](https://incrypthos.com/news/api-security/), [Asset](https://incrypthos.com/news/asset/), [Breach](https://incrypthos.com/news/breach/), [Compromise](https://incrypthos.com/news/compromise/), [Crypto Breach](https://incrypthos.com/news/crypto-breach/), [Digital Asset](https://incrypthos.com/news/digital-asset/), [Earnings](https://incrypthos.com/news/earnings/), [External Vulnerability](https://incrypthos.com/news/external-vulnerability/), [Financial Loss](https://incrypthos.com/news/financial-loss/), [Platform Compromise](https://incrypthos.com/news/platform-compromise/), [Protocol](https://incrypthos.com/news/protocol/), [Risk](https://incrypthos.com/news/risk/), [Security](https://incrypthos.com/news/security/), [Security Incident](https://incrypthos.com/news/security-incident/), [Solana](https://incrypthos.com/news/solana/), [Solana Network](https://incrypthos.com/news/solana-network/), [Supply](https://incrypthos.com/news/supply/), [Third-Party](https://incrypthos.com/news/third-party/), [Third-Party Risk](https://incrypthos.com/news/third-party-risk/), [Token Drain](https://incrypthos.com/news/token-drain/)

---

## Raw Schema Data

```json
{
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
        {
            "@type": "ListItem",
            "position": 1,
            "name": "Home",
            "item": "https://incrypthos.com"
        },
        {
            "@type": "ListItem",
            "position": 2,
            "name": "Security",
            "item": "https://incrypthos.com/security/"
        },
        {
            "@type": "ListItem",
            "position": 3,
            "name": "SwissBorg Earnings Program Breached via Partner API",
            "item": "https://incrypthos.com/security/swissborg-earnings-program-breached-via-partner-api/"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "http://incrypthos.com#organization",
    "name": "Incrypthos",
    "url": "http://incrypthos.com",
    "description": "Incrypthos Crypto News Engine is a proprietary language model designed specifically for the cryptocurrency domain. It operates 24/7 to ingest, analyze, and synthesize information from hundreds of global sources. Its core function is to discern the signal from the noise, reconstructing complex news and research into structured, objective summaries. Every article is generated by this engine and includes a direct link to the original source to ensure full transparency.",
    "email": "info@incrypthos.com",
    "logo": {
        "@type": "ImageObject",
        "url": "https://incrypthos.com/wp-content/uploads/2025/09/Incrypthos.svg"
    }
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Article",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "@id": "https://incrypthos.com/security/swissborg-earnings-program-breached-via-partner-api/"
    },
    "headline": "SwissBorg Earnings Program Breached via Partner API \u221e Security",
    "description": "An external API compromise allowed attackers to drain $41 million in Solana tokens, highlighting critical third-party integration risks. \u221e Security",
    "url": "https://incrypthos.com/security/swissborg-earnings-program-breached-via-partner-api/",
    "datePublished": "2025-09-16T20:47:19+00:00",
    "dateModified": "2025-09-16T20:47:21+00:00",
    "articleSection": [
        "Security"
    ],
    "author": {
        "@id": "http://incrypthos.com#organization"
    },
    "publisher": {
        "@id": "http://incrypthos.com#organization"
    },
    "image": {
        "@type": "ImageObject",
        "url": "https://incrypthos.com/wp-content/uploads/2025/09/immutable-digital-assets-cold-storage-protocol-elements.jpeg",
        "caption": "The image displays several blue and clear crystalline forms and rough blue rocks, arranged on a textured white surface resembling snow, with a white fabric draped over one rock. A reflective foreground mirrors the scene, set against a soft blue background. This composition powerfully symbolizes core elements of the crypto ecosystem. Raw blue rocks represent foundational blockchain blocks or the output of proof-of-work mining, while transparent, faceted crystals embody refined digital assets, such as non-fungible tokens NFTs or highly liquid utility tokens. The pristine white environment suggests secure cold storage solutions and the immutable nature of decentralized ledger technology DLT. The draped white fabric signifies wrapped tokens, enhancing interoperability or providing additional privacy and security protocols. The reflective surface below denotes active liquidity pools crucial for decentralized finance DeFi platforms, highlighting market transparency and value flow within a distributed network. This narrative encapsulates the journey from raw data to tokenized value, emphasizing security, scarcity, and robust consensus mechanisms."
    },
    "keywords": [
        "API",
        "API Security",
        "Asset",
        "Breach",
        "Compromise",
        "Crypto Breach",
        "Digital Asset",
        "Earnings",
        "External Vulnerability",
        "Financial Loss",
        "Platform Compromise",
        "Protocol",
        "Risk",
        "Security",
        "Security Incident",
        "Solana",
        "Solana Network",
        "Supply",
        "Third-Party",
        "Third-Party Risk",
        "Token Drain"
    ]
}
```


---

**Original URL:** https://incrypthos.com/security/swissborg-earnings-program-breached-via-partner-api/
