Drift's hacking recovery plan! Funded by Tether with over $120 million, announces abandonment of USDC in favor of USDT

Drift Protocol Announces $150 Million Recovery Plan Led by Tether and Fully Settled Using $USDT . This move aims to address the $295 million loss caused by North Korean hackers.

Strategic Shift in Restart Operations and Settlement Assets

Solana’s largest decentralized perpetual contract exchange, Drift Protocol, announced yesterday (4/16) a comprehensive recovery plan totaling $150 million, aimed at addressing the $295 million asset loss resulting from a North Korean hacker attack in early April.

Image source: X/@DriftProtocol Drift Protocol announced yesterday a total recovery plan of $150 million

Led by stablecoin leader Tether, supporting with a funding scale of up to $127.5 million, with the remaining $20 million jointly raised by several unnamed ecosystem partners. This restart plan signifies a major infrastructure overhaul for Drift, as the platform has decided to fully abandon Circle-issued $USDC and switch to Tether’s $USDT as the core settlement asset. This move not only addresses the immediate financial crisis but also demonstrates Tether’s strategic ambition to challenge $USDC ’s long-term dominance on the Solana network.

According to the signed agreement, this $150 million fund is not a one-time cash injection but a combination of future revenue-linked credit lines, ecosystem-specific grants, and liquidity loans to market makers. This multi-layered funding structure aims to ensure the platform, once back online, has deep trading liquidity and stable operational resources, while positioning $USDT as the operational core of the entire trading system.

• Related news: DeFi platform Drift hacked on April Fools! Hackers drain $270 million in assets, admin keys become vulnerabilities

Innovative Recovery Mechanism and Compensation Token Plan

For the 128k severely affected users, Drift has planned a long-term asset recovery mechanism, with the core goal of gradually compensating for the $295 million lost in the hacker incident. The platform will establish a dedicated “Recovery Pool,” funded by a portion of future trading fees, committed capital from partners, and any stolen assets recovered through law enforcement or on-chain tracking.

To provide users with liquidity and rights assurance, Drift plans to issue a new, transferable recovery token to affected KOLs. This token, independent of the original governance token $DRIFT , represents the holder’s claim on assets in the recovery pool. Users can choose to hold it long-term, gradually receive payouts as platform revenue flows into the recovery pool, or sell it on the secondary market for early cash. This plan reflects Drift’s long-term commitment to the community, emphasizing that restoring user trust is the top priority after the platform’s restart.

Drift CEO states that this system links compensation progress to the platform’s actual operational performance, ensuring user rights are protected without imposing a destructive burden on platform growth.

Hack Penetration and Defense System Fully Upgraded

Investigation reports indicate that the attack causing asset loss was not accidental but a carefully planned infiltration by a North Korean government-funded hacker organization, lasting over six months. The attackers disguised themselves as professional quantitative traders, gaining trust through participation in physical meetings and social engineering. They further exploited malicious TestFlight apps and software vulnerabilities to infiltrate core contributors’ devices, gaining control of multisignature wallets.

During the attack on April 1, hackers drained assets stored in the core vault within a short period, causing $DRIFT token prices to plummet over 70%. To learn from this and eliminate security risks, Drift implemented strict security upgrades before relaunch, including independent audits by top security firms OtterSec and Asymmetric Research.

• Related news: Drift hacker case: North Korean hackers infiltrated for 6 months, creating the biggest DeFi theft in spring 2026

Post-restart, the platform will introduce a new multi-signature governance system, where all signing processes must be completed on dedicated isolated hardware devices and verified independently outside the trading interface. This enhanced security process aims to minimize risks from human infiltration and device poisoning through physical isolation and multiple verifications, establishing industry-leading security defenses.

Stablecoin Landscape Reshuffle and Circle Trust Crisis

Drift’s asset transfer also sparked in-depth discussions within the crypto industry about the responsibilities of stablecoin issuers. After the attack, hackers used Circle’s cross-chain transfer protocol (CCTP) to move about $232 million of $USDC from Solana to Ethereum for money laundering over a six-hour window. On-chain data shows that despite the opportunity to intervene during this half-day window, Circle failed to freeze the stolen funds promptly, drawing strong criticism from community members including well-known investigator ZachXBT.

Circle CEO Jeremy Allaire reaffirmed the company’s stance, emphasizing that they only freeze assets upon receiving official law enforcement orders, to comply with legal and regulatory standards and protect user rights. In contrast, Tether demonstrated a more proactive intervention efficiency in handling hackers and illicit funds, which became a key factor in Drift’s decision to switch to $USDT .

Further reading
Who’s to blame for Drift being hacked? Hackers cross-chain assets but no freeze, ZachXBT criticizes Circle for negligence
Criticized for slow USDC freezing! Circle CEO: Only freeze upon court order, refuse to freeze privately

Currently, although $USDC still holds a leading market cap on Solana, the shift of high-volume platforms like Drift and Tether’s active resource injections into user rewards have caused a fundamental change in the stablecoin competition landscape on Solana. This incident not only led Circle to face class-action lawsuits but also prompted the market to reevaluate the role of stablecoin issuers as gatekeepers in decentralized finance environments.