False Top Up
1 incident, 0 live. 263 days since the last new one.
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in 2026
1 drains in 2026
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½
Less More
Past
February 2026 1
-
Low✓Contained
SPL token-account ownership reassignment used to fake deposits at a Solana custodian
In February 2026 Liminal Custody's monitoring caught two low-value attempts that used SetAuthority to reassign an attacker's temporary SPL token account to a customer's deposit address after a net-zero transfer, so systems that look up owners through RPC could credit a deposit that never happened. Liminal says no erroneous credit occurred and no customer funds were affected. Exchanges, custodians and payment apps on Solana should verify the expected associated token account and real balance increases before crediting.
Liminal Custody Solana deposit monitoring (custodian, exchange-style deposit addresses)·Solana·Since Feb 1, 2026·
No drains match these filters.