Solana arbitrage bot King was stolen about $786,000, with cu
According to monitoring by Onchain Lens, the Solana on-chain arbitrage bot King was hacked for approximately $786,000 in assets, including 4,260 WSOL, 191 SOL, and $366,000 in stablecoins; the bot's historical cumulative PnL is about $7.2 million. Odaily Planet Daily and Wu Blockchain reported on the same day that the cause of the theft has not yet been disclosed.
Event Timeline
- [11-02 18:14] King, a long-standing Solana arbitrage bot with cumulative PnL of $7.2 million, was hacked for approximately $786,000 (Odaily Planet Daily)
- [11-02 18:14] King, a long-standing Solana arbitrage bot with cumulative PnL of $7.2 million, was hacked for approximately $786,000 (Odaily Planet Daily)
- [11-02 18:20] Solana on-chain arbitrage bot King was hacked for approximately $786,000, with historical cumulative profit of about $7.2 million (Wu Blockchain)
- [11-02 18:20] Solana on-chain arbitrage bot King was hacked for approximately $786,000, with historical cumulative profit of about $7.2 million (Wu Blockchain)
Background and Impact
Around 18:00 on November 2, 2026, Odaily Planet Daily and Wu Blockchain successively reported, citing data from the on-chain monitoring platform Onchain Lens, that the Solana on-chain arbitrage bot King had been hacked, with assets involved worth approximately $786,000. According to the disclosed composition, the stolen assets included 4,260 WSOL, 191 SOL, and stablecoins worth about $366,000. The reports also listed three addresses: the drainer address BHRayETPjvgg3BCr9H82V1D6NRwxu5v44JAaVuaod3jU, the forwarding address Ddmy5oM8xtTs1EBC6eF2SZwQfBreewQpFgtUDm51Hkqj, and the victim address 7dGrdJRYtsNR8UYxZ3TnifXGjGc9eRYLq9sELwYpuuUu.
In terms of background, King is not a newly emerged contract but an on-chain arbitrage program that has been running for a long time. Regarding its historical performance, the two media outlets described it slightly differently: Odaily Planet Daily called it one of the longest-running arbitrage bots in Solana history, while Wu Blockchain described it as one of Solana's earlier arbitrage bots; both cited Onchain Lens as the source. On the scale of profit, the two were consistent: King's historical cumulative PnL is about $7.2 million. It should be noted that $786,000 is the valuation of the assets stolen this time, while $7.2 million is the bot's long-term cumulative profit and loss data; the reports did not explain how the two correspond, nor whether this loss has been included in the cumulative PnL. As for the specific time of the theft, the attack method, whether private keys or the program were compromised, and whether the funds have been moved, none of the existing materials disclose these details, and the reports did not attribute the incident to any specific attacker.
At the impact level, the information currently confirmed about this matter is still limited to the on-chain addresses and asset composition; there is no data indicating what impact it has had on Solana network activity or the SOL price, nor is there evidence that other arbitrage bots have suffered similar attacks. What can be observed is that on-chain automated trading programs hold available balances for long periods, and their security boundaries differ from those of ordinary self-custody wallets: the program needs to continuously sign and deploy funds, and once permissions are compromised, losses will be directly reflected on-chain. For participants who need to track price spreads across platforms, entry information such as Huobi HTX registration app download, Gate.io registration app download, Bitget registration app download, Binance registration app download, and OKX registration app download is often searched, but this report did not mention any centralized exchange, nor did it state that the incident is related to exchange accounts; the relevant fund movements should still be based on on-chain monitoring data.
One more point needs to be explained: the four materials actually come from only two media outlets, with Odaily Planet Daily and Wu Blockchain each appearing twice, and the titles and summaries are duplicated, so this reporting did not involve cross-verification by four independent sources. The core numbers and addresses are consistent between the two outlets, and the divergence is concentrated in wording—whether it is "one of the longest-running arbitrage bots in history" or "one of the earlier arbitrage bots"—which is a difference in qualitative description and does not affect the record of the stolen amount and asset composition. Further developments depend on whether the monitoring party publishes new on-chain tracking results.
FAQ
### Was the stolen money user funds or the bot's own funds?
The materials only state that King is a Solana on-chain arbitrage bot and list the composition of the stolen assets and three related addresses. They do not explain the ownership of the source of funds, nor whether there were external user deposits. Before the monitoring party provides additional clarification, it should not be concluded that user assets were lost.
### What is the relationship between $786,000 and $7.2 million?
$786,000 is the valuation of the assets stolen this time, while $7.2 million is the bot's historical cumulative PnL. The two use different statistical bases, and the reports did not state whether the cumulative PnL already includes this loss, nor did they state the proportion of the stolen assets to its historical profit.
### What nodes should be watched going forward?
Attention can be paid to Onchain Lens's follow-up tracking of addresses such as the drainer address BHRayETPjvgg3BCr9H82V1D6NRwxu5v44JAaVuaod3jU, whether the stolen assets are moved, and whether on-chain records emerge of other Solana arbitrage bots being attacked with similar methods.