Drift protocol (DRIFT)

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.

We may have found the individual/s related to the @DriftProtocol incident. We are willing to share all the information that we have with the Drift team. My DMS are open, contact me if needed.

1/ We've spent the last ~16 hours conducting an independent forensic investigation into the @DriftProtocol exploit. We are limited on what we can share publicly while we work alongside the Drift team and relevant authorities on the ongoing recovery effort. Here's what we can say. Built with @DivergSec

1/ We've spent the last ~16 hours conducting an independent forensic investigation into the @DriftProtocol exploit. We are limited on what we can share publicly while we work alongside the Drift team and relevant authorities on the ongoing recovery effort. Here's what we can say. Built with @DivergSec

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved multi-week preparation and staged execution, including the use of durable nonce accounts to pre-sign transactions that delayed execution.