SlowMist: The multi-signature mechanism was modified more than a week before the Drift theft, followed by an administrator privilege leak

MeNews · 2026-04-11T10:49:10+00:00

SlowMist analyzes the Drift theft incident, pointing out that a week before the attack, Drift adjusted the multi-signature mechanism without setting a time lock, which allowed the attacker to gain administrator privileges, forge tokens, and manipulate oracles, resulting in the theft of approximately $226 million. The flow of related funds is currently being tracked.

MeNews

2026-04-11 10:49:10

Abstract generation in progress

ME News Report, April 2nd (UTC+8), SlowMist published an analysis of the Drift theft incident, pointing out that one week before the attack, Drift adjusted its multi-signature mechanism to “2/5” (1 old signer + 4 new signers), and did not set a timelock. The attacker then gained admin privileges, forged CVT tokens, manipulated oracles, disabled security mechanisms, and transferred high-value assets from the liquidity pool. Currently, the stolen funds have mainly been consolidated into an Ethereum address, totaling approximately 105,969 ETH (about $226 million). SlowMist stated that the related fund flows are still being actively tracked. (Source: ChainCatcher)

ETH2,35%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes