Certik Reports on Sola Security Incident and Related Attacks

According to Foresight News, Certik has released an analysis of the Sola security incident that occurred on April 12, 2025. An unverified contract, identified as 0x623c, was exploited due to inadequate access control, resulting in a loss of approximately $28,000. This incident marks the fourth attack linked to the same perpetrator, who previously targeted Gemcy, OPC, and AIRWA, amassing around $181,000 in profits. On April 23, the attacker executed a fifth attack on ACB. Overall, the attacker transferred 498 BNB to Tornado Cash across these five incidents. As of 2025, Certik has documented 93 incidents related to code vulnerabilities, with total losses amounting to approximately $52.5 million. Code vulnerabilities rank as the second most common cause of losses, following phishing incidents.