Drift Protocol Hacked - $280 Million Stolen in Heist
Basically, hackers stole $280 million from a trading platform by taking control of its admin powers.
A major security breach at Drift Protocol has resulted in a staggering $280 million loss. The hackers executed a sophisticated attack without exploiting flaws. Users are advised to avoid depositing funds while investigations are ongoing.
What Happened
On April 1, 2026, the Drift Protocol, a decentralized finance (DeFi) trading platform built on the Solana blockchain, reported a significant security breach. Hackers seized control of the platform's Security Council administrative powers, leading to an estimated loss of $280 million. The attack was meticulously planned and executed, showcasing the evolving tactics of cybercriminals in the cryptocurrency space.
How the Attack Worked
The attackers employed a sophisticated strategy by leveraging durable nonce accounts and pre-signed transactions. This allowed them to delay the execution of malicious transactions until the perfect moment. Between March 23 and March 30, they set up these accounts and obtained 2 out of 5 multisig approvals from Security Council members, which enabled them to pre-sign transactions that would later be executed simultaneously with a legitimate transaction on April 1st.
Who's Affected
The breach has had a widespread impact on the Drift Protocol's users. With 200,000 traders and a trading volume exceeding $55 billion, the loss has frozen all protocol functions, affecting borrow/lend deposits, vault deposits, and trading funds. However, the protocol assured users that DSOL assets and the insurance fund remain secure.
What Data Was Exposed
While the attackers did not exploit any flaws in the Drift Protocol's programs or smart contracts, the breach highlights vulnerabilities in governance structures. The hackers introduced a malicious asset, removed withdrawal limits, and drained funds, all while maintaining the appearance of legitimate transactions.
What You Should Do
Drift Protocol has urged users to refrain from depositing any funds until further notice. They are currently collaborating with security firms, cryptocurrency exchanges, and law enforcement to trace and freeze the stolen assets. Users should remain vigilant and monitor their accounts for any unusual activity.
Future Actions
Drift Protocol has committed to publishing a detailed post-mortem report to shed light on the incident and improve security measures. This breach serves as a stark reminder of the importance of robust security practices in the rapidly evolving DeFi landscape.