A Solana DEX halted trading and says the loss stopped at its treasury. Nobody can check

A containment claim issued while the investigation is still running is a hypothesis, not a finding. HumidiFi told followers on X that a portion of its internal network was affected, that the impact was confined to its own funds, and that the team was still investigating, all in the same disclosure ^[2]. It has not put a number on the loss, and it has not said whether the event was a hack ^[3].

What an integrator can actually check is flow. DefiLlama put 30-day volume at roughly $2.468 billion ^[5], which works out to about $82 million a day on average ^[1]. The $213.79 million recorded in the day around the disclosure ^[4] is roughly 2.6 times that run rate ^[2]. That multiple is not evidence of anything on its own, because a rolling 24-hour window that spans an incident and a halt will catch both exit flow and ordinary flow, but it does mean the venue was operating well above its own baseline when it went dark.

The token gives a second read, and it is a small one. WET fell 8.66 percent to $0.07173 with volume up about 192 percent ^[6], against a market capitalisation near $12.2 million ^[7]. That drop is worth roughly $1.16 million of market value ^[4], or about half a percent of a single day's trading through the venue ^[5]. Holders repriced something. Whatever they repriced, the sum involved is a rounding error next to the order flow, which is the problem with treating the token chart as a damage estimate.

The disclosure habits have precedent. HumidiFi's December 2025 presale on Jupiter was taken over by a bot farm that bought nearly the whole supply, and the team voided the sale with the line "The sniper is not getting shit" ^[8]. Bubblemaps traced at least 1,100 of roughly 1,530 participating wallets to identical funding and timing patterns ^[9]. Cryptopolitan reported the sale had still taken in $1.39 million of USDC before cancellation ^[10], and the team promised replacement tokens and a pro-rata airdrop for legitimate buyers ^[11]. Fast unilateral action, colourful post, thin numbers afterwards.

For scale on what an unquantified "own funds only" could mean, the quarter to June 22, 2026 logged about 83 security incidents and roughly $775 million of losses on DefiLlama's count, the most incident reports on record ^[12]. That averages about $9.3 million per incident ^[3]. Nothing says HumidiFi sits at the average. The point is that the range a reader is left to guess at is wide, and the venue is the only party that can narrow it.

Until addresses and amounts are published, counterparties routing through HumidiFi are holding a self-report from a party with an obvious interest in the answer. That is not an accusation. It is a description of the evidence available, which is a halted venue, a volume print, and a sentence.