Drift Protocol, a major Solana-based DeFi exchange, has suffered a $285 million social engineering-driven exploit that weaponized a compromised administrator key rather than any code flaw.
Drift Protocol, a Solana-based derivatives decentralized exchange (DEX), has suffered a major exploit that drained an estimated $200 million to $285 million in user assets, intensifying security concerns across the Solana DeFi ecosystem and reviving questions about oracle design and admin-key risk. The attack occurred on Wednesday UTC (early Thursday in South Korea), according to on-chain tracing and statements from the project.
The exploit highlights vulnerabilities in DeFi protocols, potentially undermining trust and prompting stricter security measures industry-wide. Drift Protocol exploiter doubles down on Ethereum after siphoning $285 million in assets.
Drift Protocol Vault Loses $270M in Potential Exploit
ZachXBT accused Circle of inaction while stolen USDC moved through its own bridge during the Drift hack, weeks after it froze 16 legitimate business wallets.
An attacker drained $285 million from Solana's largest perpetual futures exchange using a fabricated token, manipulated oracles, and a compromised admin key.
Drift said a durable nonce attack helped drive its Solana exploit, as critics questioned why stolen USDC moved for hours without a freeze.
Drift said Wednesday's $280 million exploit was a result of unauthorized transaction approvals, facilitated through durable nonce mechanisms.
One of Solana's most trusted DeFi platforms just became the victim of a massive heist. Drift Protocol has suffered a major exploit, with losses exceeding $285 million after an attacker gained control of key administrative permissions. Following the Drift Protocol exploit, the Drift token price crashed by 42%, now trading around $0.041.
A sophisticated attack has shaken DeFi, with the drift protocol hack exposing critical weaknesses in operational security and transaction approvals. On Drift Protocol, attackers managed to drain about $280 million from an associated wallet, impacting nearly half of its funds. According to the team, this was a highly organized operation that unfolded over time rather than a simple, opportunistic theft.
Coordinated breach targets Drift's Security Council using durable nonce accounts and social engineering.
Drift Protocol lost up to $285M, but had wider repercussions on Solana DeFi, affecting multiple protocols for a partial or a total loss of user funds. DRIFT sank by 37% to $0.04.