Drift Protocol initiates full rebuild after North Korean hacker attack, bringing in top security teams to accelerate platform review

Deep Tide TechFlow news. On June 04, according to an official announcement from Drift, the latest recovery progress for the Drift protocol was released on June 3, 2026. An independent forensic investigation by the cybersecurity firm Mandiant has confirmed that the earlier attack on Drift was carried out by the North Korea threat group UNC6862, and its tactics closely match those of historically North Korea state-sponsored hacking activities.

On the rebuilding front, Drift announced the appointment of Noah Prince, the former engineering lead of the Helium protocol, as the protocol lead. He will lead codebase hardening and the restructuring of the platform’s security architecture. At the same time, Drift has hired former Gauntlet team members to handle liquidation engine review, optimization of the funding rate and market parameters, liquidation module/engine optimization, as well as ongoing risk monitoring.

Drift plans to relaunch with “security first” at its core, re-positioning itself as the largest USDT perpetual contract exchange on Solana. With support from strategic partners such as Tether, it will establish a dedicated recovery pool to compensate users for losses driven by platform revenue. Details of the subsequent recovery mechanisms and timeline will continue to be disclosed.