Jupiter Perps LP (JLP)

Drift Protocol said the incident involved a malicious actor using a novel attack related to durable nonces to gain unauthorized access and quickly take control of Drift Security Council administration. Drift described the exploit as long-prepared and highly complex, potentially involving pre-signed transactions via durable nonce accounts that enabled delayed execution, ultimately resulting in roughly $280 million being withdrawn. Drift said its initial investigation indicates the cause was not a code or smart contract vulnerability, and it has found no evidence of seed phrase compromise; the attacker may have obtained permissions through unauthorized or forged transaction approvals, potentially involving social engineering. https://t.co/zD7fFW9PrQ

🚨JUST IN: @JupiterExchange says $JLP remains safe and fully backed after the Drift exploit stole large amounts of $JLP from Drift vaults, adding that even large redemptions or burns do not change $JLP’s price. https://t.co/QBoKZxuyzx