Drift Hack: $285M Stolen April 1, 2026. Drift Protocol, Solana's biggest perps DEX, lost $285 million in a matter of minutes. It's the second biggest hack in Solana history. But how it happened is honestly more interesting than how much got stolen. ➛ How It Happened The attack happened in four steps. And each step points less to a simple security bug, more to a design flaw. ➛ 1. Fake token ‣ A "CarbonVote Token" (CVT) was minted, a pool was opened on Raydium with just $500 liquidity, and the price was pushed to $1 through wash trading. So oracle feeds can be manipulated. ➛ 2. Oracle manipulation ‣ That inflated CVT price got reflected into the oracles, and Drift recognized it as a real asset. So the price source became a single point of failure. ➛ 3. Admin key got compromised ‣ Through social engineering, admin access was obtained, CVT got listed as a market, and withdrawal limits were removed. So the human factor is still the weakest link. ➛ 4. Fast withdrawals ‣ CVT was used as collateral to withdraw USDC, SOL, JLP, and WBTC. $285M. Gone. ➛ The attacker moved the funds right away: bridged part of it to ETH (19,913 ETH = $42.6M), swapped some on Hyperliquid from SOL into ETH, and sent the rest to Binance. And Circle? They were too slow to freeze the stolen USDC. That opened up a whole separate debate too. ➛ Elliptic, the blockchain analytics firm, linked the attack to North Korean hackers, consistent with the Lazarus Group's known playbook. The attack signatures are pretty clear: cross-chain laundering patterns, pre-positioned wallets, and test transactions before the main exploit. That's classic Lazarus Group playbook stuff. For context, Lazarus stole over $2 billion in 2025. Bybit alone was $1.46B. And in 2026, the pace didn't slow down it accelerated. ➛ The Domino Effect This is where the real issue starts. Drift's TVL was $534M before the hack. Within an hour, it dropped to $255M. Cut in half. But the damage didn't stay inside Drift. The Solana DeFi ecosystem is tightly connected. So when Drift broke: ‣ Protocols using Drift as collateral started facing liquidity stress ‣ DEX volumes across Solana fell back toward 2024 lows ‣ The DRIFT token dropped more than 40%, down to $0.06 ‣ Investor confidence got hit hard And this isn't just a Drift-specific thing. The same pattern showed up in the January 2026 Step Finance ~$27M treasury hack too. One protocol breaking triggered liquidity stress across other connected Solana protocols. Composability is DeFi's biggest strength. But it's also its biggest weakness.
· 3.8K Views
