Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Launchpad
Be early to the next big token project
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
More
👉#DriftProtocolHacked
Drift Protocol Security Incident Update
Drift Protocol has confirmed a recent security breach. According to reports, a malicious actor carried out a highly sophisticated attack involving multi-week preparation and phased execution.
The attacker compromised the administrative authority of the protocol's Security Council using a novel method called "durable nonce." This attack was made possible by a combination of factors including delayed execution of pre-signed transactions and the compromise of multi-signature (multisig) validators, likely through social engineering.
The Drift Protocol team immediately suspended deposit and withdrawal operations. They are coordinating with multiple security firms, bridges, and exchanges to fully determine the cause of the incident and track and freeze the stolen assets.
Users are strongly advised to exercise caution and refrain from investing funds in the protocol until the investigation is complete. A more detailed technical analysis and report will be shared as new information becomes available.
One of the Biggest DeFi Security Crises of 2026
The year 2026 began with a critical turning point for the decentralized finance (DeFi) ecosystem. Drift Protocol, a leading Solana-based perpetual futures platform, was shaken by a large-scale cyberattack on April 1, 2026, resulting in the theft of approximately $280–286 million worth of digital assets.
This event was not only the biggest DeFi hack of the year but also one of the most serious security breaches ever recorded in the Solana ecosystem.
Technical Anatomy of the Attack
According to initial analyses, the attack resulted from a privilege escalation at the admin level rather than a classic smart contract vulnerability.
The attacker gained access to Drift Protocol's administrator keys or multisig privileges.
Alternative analyses suggest the attack was carried out by exploiting Solana's "durable nonce" mechanism.
Using this method, the attacker manipulated the system by triggering pre-approved transactions with a delay.
This situation once again reveals that the most critical vulnerability in DeFi security is still the human factor and operational processes.
Scale and Impact of the Attack
Total assets stolen: ~$280M – $286M
Largest single transaction: ~$155M worth of JLP tokens
Drift's TVL: $550M → dropped below $250M
Post-attack:
Platform operations halted
Many Solana DeFi protocols temporarily suspended operations
Market confidence suffered a serious blow in the short term
Movement of Funds and Cross-Chain Flow
The attacker employed a complex strategy to quickly make the funds difficult to track:
Stolen assets were converted to USDC on Solana
Then transferred to the Ethereum network via cross-chain bridges
A large portion was converted to ETH
It was determined that the attacker accumulated 130,000+ ETH (~$260M) during this process
This action was not only a hack but also a forced liquidity rotation in the market. It created an event that even affected Ethereum's price dynamics.
Claims of North Korean Connection
According to blockchain analytics firms, the attack's traces show similarities to previous operations:
Attack methodology
Fund laundering techniques
Cross-chain movement pattern
These indicators suggest the attack may be linked to North Korean-linked Lazarus-like groups.
If confirmed, this event would be one of North Korea's largest crypto operations in 2026.
Controversy and Ecosystem Response
One of the biggest debates after the event was about centralized structures and stablecoin issuers:
Blockchain researcher ZachXBT claimed Circle failed to freeze 230M USDC.
This raised the question of "is centralized intervention possible/necessary?" The question was raised again.
Security experts also emphasized that the event was a "wake-up call," drawing particular attention to the following:
Key management
Multisig security
Human-based attack vectors
Strategic Implications
This hack clearly revealed several critical realities for the DeFi world:
1. Smart contract security is no longer sufficient.
The attack came from the governance layer, not directly from the code.
2. The human factor is the weakest link.
Social engineering and operational manipulation remain the biggest risks.
3. Cross-chain structures amplify risks.
Cross-chain bridges make fund tracking difficult after an attack.
4. "Centralized reflexes" are inevitable in DeFi.
Issues such as fund freezing, intervention, and crisis management are back on the agenda.
Conclusion
The #DriftProtocolHacked event is not only a significant financial loss; it is also a breaking point that tests the limits of DeFi's security architecture.
This attack clearly demonstrates that the industry needs to shift from a purely code-based security approach to a multi-layered one that includes governance, human factors, and cross-chain risk management.