Drift protocol (DRIFT)

🚨 In the last few hours, Drift Protocol (Solana DeFi) was hacked. On-chain data shows that roughly $285 million has been withdrawn from the protocol, mainly SOL, USDC and other assets. Drift confirmed an ongoing attack and stopped deposits and withdrawals. The exact cause has not yet been confirmed; currently speculation points to a smart‑contract exploit or compromised keys. The stolen funds have already been distributed across multiple wallets and partially swapped. The DRIFT token reacted immediately with a sharp drop and the protocol’s liquidity has decreased significantly. This could become one of the biggest DeFi hacks of 2026. If you have used Drift: check and revoke wallet approvals, avoid interacting with the protocol for now, and await official updates.

yesterday (April 1, 2026) wasn’t a joke. Drift Protocol one of Solana’s biggest perpetuals DEXes, sitting on hundreds of millions in TVL got drained for an estimated $200–285M in one of the largest on-chain exploits we’ve seen this year. the team suspended deposits and withdrawals immediately and is working with security firms. Funds were moved fast: swapped on Jupiter, bridged to Ethereum, and largely converted to ETH. The DRIFT token got wrecked in the process. but here’s what actually happened, and why this incident is bigger than just another “DeFi hack.” the attack in plain English (the mechanics, not the memes): - the attacker spent weeks preparing: minted ~750 million units of a completely fake token called CarbonVote Token (CVT). - the created a tiny Raydium pool with just $500 in liquidity to manufacture a fake ~$1 price, then wash-traded it to build a believable on-chain price history that oracles would pick up. - using a compromised Drift admin key, they listed CVT as valid collateral on the pr

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.

We may have found the individual/s related to the @DriftProtocol incident. We are willing to share all the information that we have with the Drift team. My DMS are open, contact me if needed.

1/ We've spent the last ~16 hours conducting an independent forensic investigation into the @DriftProtocol exploit. We are limited on what we can share publicly while we work alongside the Drift team and relevant authorities on the ongoing recovery effort. Here's what we can say. Built with @DivergSec