Jupiter Perps LP (JLP)

Drift Protocol said the incident involved a malicious actor using a novel attack related to durable nonces to gain unauthorized access and quickly take control of Drift Security Council administration. Drift described the exploit as long-prepared and highly complex, potentially involving pre-signed transactions via durable nonce accounts that enabled delayed execution, ultimately resulting in roughly $280 million being withdrawn. Drift said its initial investigation indicates the cause was not a code or smart contract vulnerability, and it has found no evidence of seed phrase compromise; the attacker may have obtained permissions through unauthorized or forged transaction approvals, potentially involving social engineering. https://t.co/zD7fFW9PrQ

🚨最新消息：@JupiterExchange 表示，在 Drift 漏洞从 Drift 金库中偷取了大量 $JLP 之后，$JLP 仍然安全且完全有背书，并补充说明，即使大额赎回或销毁也不会影响 $JLP 的价格。 https://t.co/QBoKZxuyzx