Solv Protocol Confirms $2.7 Million Exploit in Bitcoin Yield Vault, Commits to User Compensation

Solv Protocol, a Bitcoin-focused decentralized finance platform, has reported a limited exploit affecting one of its Bitcoin Reserve Offering (BRO) vaults, resulting in the loss of approximately 38 SolvBTC valued at $2.7 million and impacting fewer than 10 users.

The protocol has committed to covering all losses through direct compensation while confirming that other vaults and user funds remain secure, as security investigations continue with Hypernative Labs, SlowMist, and CertiK.

Exploit Details and Attack Mechanism

The exploit targeted a specific BRO vault contract within Solv Protocol’s structured yield product suite. According to security firm Decurity’s automated monitoring bot, the attacker exploited a double-minting vulnerability in a BitcoinReserveOffering contract, repeating the attack 22 times.

The double-mint flaw allowed the attacker to inflate an initial balance of 135 BRO tokens into approximately 567 million BRO through repeated unauthorized minting. The inflated tokens were subsequently exchanged for about 38 SolvBTC, which were then withdrawn from the vault. Such vulnerabilities occur when contract logic permits token creation without proper validation of supply limits or transaction state.

Solv Protocol described the incident as a “limited exploit” isolated to a specific vault rather than affecting the broader protocol infrastructure. The team stated that all other vaults and associated user funds remain secure and unaffected.

User Compensation and Protocol Response

Solv Protocol announced it will cover the full loss of 38.0474 SolvBTC, worth approximately $2.7 million at the time of the attack, and compensate impacted users directly. The protocol has extended a 10 percent white hat bounty offer to the exploiter contingent upon return of the stolen funds.

The team is conducting active investigations with multiple blockchain security partners, including Hypernative Labs, SlowMist, and CertiK. Measures have been implemented to prevent recurrence of similar vulnerabilities.

In a statement on X, Solv Protocol emphasized its commitment to security and user protection, noting that the response team is working diligently to analyze the incident and strengthen contract safeguards.

Protocol Background and Market Position

Solv Protocol operates as an onchain Bitcoin reserve platform designed to transform BTC into a productive asset. Its flagship product, SolvBTC, is a wrapped Bitcoin instrument enabling retail and institutional investors to earn yield on BTC holdings across decentralized finance markets.

The protocol features structured yield vaults known as Bitcoin Reserve Offerings (BROs), which pool capital and deploy strategies aimed at generating returns for Bitcoin holders. According to DefiLlama data, more than $508 million in total value is currently locked across SolvBTC-related products.

The protocol reports a treasury balance exceeding 24,000 BTC, positioning itself as the largest onchain Bitcoin reserve by this metric. Backers include Binance Labs, Blockchain Capital, and OKX Ventures.

Institutional Context and Previous Developments

In 2024, Beijing-based Zeta Network Group announced plans to raise $230 million through a private placement tied to a crypto treasury strategy involving both BTC and SolvBTC. This institutional interest underscores the growing integration of Bitcoin-focused DeFi products into broader capital market strategies.

The exploit highlights expanding attack surfaces as Bitcoin-based DeFi protocols attract larger capital pools and increasing institutional participation. Yield vaults tied to wrapped Bitcoin products represent both opportunity and vulnerability within the evolving decentralized finance landscape.

FAQ: Solv Protocol Exploit

Q: How many users were affected by the Solv Protocol exploit and what is the compensation plan?

A: Fewer than 10 users were impacted by the exploit, which resulted in approximately $2.7 million in losses. Solv Protocol has committed to covering the full loss of 38.0474 SolvBTC and will compensate affected users directly.

Q: How did the attacker execute the exploit?

A: The attacker exploited a double-minting vulnerability in a BitcoinReserveOffering contract, repeating the attack 22 times. This flaw allowed the attacker to inflate 135 BRO tokens into approximately 567 million BRO, which were then exchanged for about 38 SolvBTC and withdrawn from the vault.

Q: What is Solv Protocol’s market position in Bitcoin DeFi?

A: Solv Protocol operates as an onchain Bitcoin reserve with over $508 million in total value locked across SolvBTC products. The protocol reports a treasury balance exceeding 24,000 BTC and counts Binance Labs, Blockchain Capital, and OKX Ventures among its backers.

Q: What security measures is Solv Protocol taking following the exploit?

A: Solv Protocol is conducting investigations with security partners including Hypernative Labs, SlowMist, and CertiK. The protocol has implemented measures to prevent recurrence and is offering a 10 percent white hat bounty to the exploiter for return of the stolen funds.