September 3 is being driven by recovery engineering, asset-access restrictions and new regulatory controls rather than a new large centralized-exchange failure.
The most important change from September 2 is Zilliqa. Zilliqa’s September 2 update says the first exchange migration hard fork is complete. A first group of exchange partners had legacy Schnorr-based ZIL balances reassigned at protocol level to Zilliqa EVM addresses. Exchanges are now completing their own testing before restoring ZIL deposits and withdrawals.
The update also adds two recovery milestones for mid-September: a second exchange migration hard fork and a self-guided zero-knowledge migration tool for legacy self-custody users. Most importantly, Zilliqa says it is preparing a community vote on a tokenomics adjustment that could include minting new ZIL specifically to compensate impacted users. That is a governance proposal, not approved compensation.
Read the update: Zilliqa Ledger Exploit Recovery
The largest newly prioritized exploit today is Aquifer, a Solana proprietary AMM. Bitquery’s on-chain reconstruction calculates approximately $2.47 million removed from Aquifer’s liquidity vaults across 212 one-sided settlements in roughly 40 minutes on August 31. The attacker appears to have caused Aquifer to accept fake input state and release real assets without receiving the expected payment.
Bitquery traced approximately 1,000.8 ETH to an attacker-linked Ethereum wallet that had not moved at the time of analysis. Aquifer’s upgrade authority issued an on-chain whitehat offer allowing the attacker to retain up to 20% if at least 80% is returned by September 3 at 14:00 UTC. At this report time the deadline has not passed and no qualifying return has been verified.
Read the detail: Aquifer Solana AMM Exploit
A major planned operational event begins later today on Mina Protocol. Mina’s official Mesa schedule sets a stop-transaction slot for 10:00 UTC, a full stop-network slot at 15:00 UTC, Mesa package publication at 16:30 UTC, and the first Mesa slot at 18:00 UTC. Mina explicitly instructs exchanges to disable deposits and withdrawals during the upgrade downtime.
This is planned maintenance, not an exploit, but it creates a real settlement and asset-access window for users, exchanges and applications.
Read the detail: Mina Mesa Mainnet Upgrade
On the regulatory side, Thailand’s SEC issued the Digital Asset Travel Rule on September 2. The rule requires digital-asset business operators to establish risk-management measures around sending and receiving digital assets so they have sufficient transfer information for AML and technology-crime monitoring. The SEC says the framework was developed with Thailand’s Anti-Money Laundering Office while AMLO prepares related regulations.
Read the detail: Thailand SEC Digital Asset Travel Rule
Finally, Wyoming’s Stable Token Commission announced a reserve-transparency upgrade for FRNT, its state-issued stable token. The Commission says FRNT has adopted Chainlink Proof of Reserve for near-real-time reserve verification and Secure Mint controls intended to prevent minting when reserve conditions are not met. This is a positive transparency development, not evidence of a reserve deficit.
Read the detail: Wyoming FRNT Proof of Reserve
① Today’s Highest-Priority Alerts
| Risk | Entity | Event | Time | Latest Status | Evidence | Continue Monitoring | New vs Previous Day |
|---|---|---|---|---|---|---|---|
| Critical | Zilliqa | Ledger exploit recovery / exchange migration | Sep. 2–3 | First exchange migration completed; second batch + retail ZK migration targeted mid-Sep; compensation mint proposal pending vote | Official | Yes | Major recovery status change |
| High | Aquifer | Solana AMM exploit | Aug. 31; deadline Sep. 3 14:00 UTC | ~$2.47M on-chain reconstruction; 212 settlements; whitehat deadline pending | On-chain + Security Research | Yes | Recovery deadline today |
| Medium | Mina | Mesa mainnet hard fork | Sep. 3 10:00–18:00 UTC | Planned transaction stop at 10:00, full network halt at 15:00, first Mesa slot at 18:00 | Official | Yes | Upgrade executes today |
| High | Thailand SEC | Digital Asset Travel Rule | Issued Sep. 2 | Rule formally issued; DA operators must implement transfer-information risk controls | Official Regulator | Yes | New issued regulation |
| Low / Positive | Wyoming FRNT | Stablecoin Proof of Reserve | Announced Sep. 2 | Near-real-time PoR and Secure Mint controls added | Official Commission | Yes | New transparency control |
| High | Kraken | 21-asset forced liquidation | Sep. 1–5 | Automatic liquidation window remains active | Official Exchange | Yes | No verified execution-quality update |
| Critical | AscendEX | Withdrawals suspended / restructuring | Ongoing | Claims Portal target remains Sep. 5; recovery amount/timetable not confirmed | Official | Yes | No material new development |
| Critical | Cronos / Tectonic | Exploit / state recovery | Ongoing | Final loss and bad-debt accounting remain unresolved | Official + On-chain | Yes | No final post-mortem |
② Exchange Exit, Shutdown and Withdrawal Risk
Kraken — High
The September 1–5 automatic-liquidation window remains active. Kraken has warned that limited or inactive markets can result in deeply discounted or minimal proceeds. No verified aggregate execution-quality report is available yet, so CEXVia does not infer average customer losses.
AscendEX — Critical
The September 5 claims-portal target is two days away. AscendEX says the portal will not initially support trading, deposits or withdrawals; displaying a balance or accepting a claim does not determine claim admission, priority, repayment timing or recovery amount. The company continues to explore rescue/restructuring while preparing for formal insolvency.
BitMEX — High
Scheduled wind-down continues toward September 23 with no new verified status today.
Luno — High
Post-closure support-led claims continue without a new material status change.
③ Regulation and Licensing
Thailand — High
The Travel Rule has moved from consultation into an issued operating requirement.
Singapore MAS — High, ongoing
No new material fact changes yesterday’s stablecoin consultation; feedback remains open through October 16.
U.S. SEC — Medium, ongoing
The transfer-agent modernization proposal remains relevant to tokenized securities but has no new September 3 status change.
④ Hacks, Vulnerabilities and Asset Loss
Aquifer — High
The ~$2.47M figure is an independent on-chain reconstruction, not an Aquifer final post-mortem. The code-level root cause remains Developing.
Zilliqa — Critical
The incident has moved from containment to partial recovery. Exchange batch one is complete; retail migration, batch two and compensation governance remain open.
Injective — High, unchanged
No new official technical post-mortem or final loss accounting was identified after yesterday’s scope clarification.
ICON — High, unchanged
No new official net-loss figure supersedes the current accounting.
⑤ User Complaints and Operational Anomalies
No new community-only complaint cluster met CEXVia’s threshold for a platform-wide High/Critical alert. KYC, source-of-funds, withdrawal-delay or account-freeze claims remain Community / Unverified unless independently corroborated.
⑥ On-chain and Market Anomalies
Aquifer’s attacker-linked Ethereum balance is today’s clearest on-chain watch. Bitquery traced roughly 1,000.8 ETH to an address that had not moved the funds at analysis time.
Zilliqa’s recovery is a protocol-state intervention: balances were directly reassigned from legacy Schnorr addresses to EVM addresses.
FRNT adds the opposite kind of signal: reserve data designed to be readable on-chain and tied to mint controls.
⑦ Watchlist
| Date / Window | Event | What CEXVia Is Watching |
|---|---|---|
| Sep. 3 10:00 UTC | Mina | Stop-transaction slot |
| Sep. 3 14:00 UTC | Aquifer | Whitehat 80% return deadline |
| Sep. 3 15:00 UTC | Mina | Planned full network halt |
| Sep. 3 18:00 UTC | Mina | First Mesa slot target |
| Sep. 1–5 | Kraken | Forced-liquidation execution quality |
| Sep. 5 | AscendEX | Claims Portal target |
| Sep. 9 | BitMart | Restructuring / resumption roadmap |
| Mid-September | Zilliqa | Second exchange hard fork + retail ZK migration tool |
| Sep. 23 | BitMEX | Exchange trading closure |
| Sep. 30 | UK FCA | New crypto-regime application period |
| Oct. 16 | Singapore MAS | Stablecoin consultation deadline |
⑧ No New Development Today, but Still High Risk
Cronos / Tectonic — Critical: final loss, bad debt and full post-mortem remain unresolved.
BounceBit — Critical: original chain remains permanently sunset; old-chain/self-custody migration risk continues.
BitMart — Critical: September 9 remains the next major milestone.
AscendEX — Critical: claims portal is approaching, but withdrawals remain suspended and recovery is not guaranteed.
Injective — High: no new official final loss or technical post-mortem today.
ICON — High: current official accounting has not been superseded.
Rain / Avici / Tria — High: reimbursements are complete according to company disclosures, but Rain’s provider-wide final technical post-mortem remains outstanding.
FAQ
What changed most since September 2?
Zilliqa’s first exchange migration is now confirmed complete, and the project has disclosed a second migration batch, retail ZK migration and a compensation governance proposal.
Is Aquifer’s $2.47M loss officially confirmed?
No. It is an independent on-chain reconstruction and is therefore labeled On-chain / Developing.
Has the Aquifer attacker returned funds?
No verified return was confirmed at report time. The whitehat deadline is September 3 at 14:00 UTC.
Is Mina being hacked?
No. Mesa is a planned mainnet hard fork.
What does Thailand’s Travel Rule change?
Digital-asset operators must maintain sufficient sender/recipient information and transfer-risk controls for AML monitoring.
Is Wyoming FRNT under-reserved?
No reserve shortfall is indicated in this event; the update is a transparency enhancement.