Crypto attorney Ariel Givner criticizes Drift Protocol for civil negligence.
Drift's $285M exploit exposed a control-layer takeover, shifting DeFi security concerns from code bugs to signer, admin, and governance risks.
Drift's exploit shows control-layer attacks rising, where response speed now defines DeFi security and trust.
Drift Protocol has revealed details surrounding a devastating $280 million exploit that occurred on April 1, 2026, exposing a sophisticated, long-running cyberattack linked to North Korean state-sponsored hackers. The decentralized exchange confirmed the breach involved months of calculated social engineering, malicious software distribution, and deep trust-building tactics before any funds were touched.
Attorney Ariel Givner says Drift's $280M exploit may qualify as civil negligence if the protocol skipped basic security safeguards.
The $280 million Drift Protocol attack was likely carried out by threat actors aligned with North Korea state-affiliated hackers.
While the world watched the news from the Middle East, a silent and surgical strike was executed on the Solana blockchain.
With "medium-high" confidence, Drift and the SEAL 911 team assess the operation was run by the same North Korean actors behind the Radiant Capital hack.
Drift Protocol (DRIFT) published a detailed incident update on April 5, revealing that the $285 million exploit on April 1 was the result of a six-month intelligence operation attributed to North Korean state-backed actors.
Drift said its $280M exploit followed months of planning and linked the attack with medium-high confidence to Radiant hackers.
Mandiant and SEAL911 are investigating a state-backed operation that compromised Drift through social engineering.
Drift says its $280M Solana exploit was a months-long, coordinated operation, likely tied to actors behind the $58M Radiant Capital hack.