Drift Hack: $285M Stolen April 1, 2026. Drift Protocol, Solanaโs biggest perps DEX, got drained for $285M in minutes. That makes it the second biggest hack in Solana history. But honestly, the amount stolen isnโt even the craziest part. The real story is how it happened. โ How It Happened This wasnโt one random bug. The exploit played out in 4 steps and each one exposed something deeper than a normal security failure. Less โone-off mistakeโ More โdesign was fragile from the startโ โ 1. Fake token The attacker minted a fake asset called โCarbonVote Tokenโ (CVT), opened a Raydium pool with just $500 in liquidity, then wash traded it until the price got pushed to $1. That alone tells you something important: oracle feeds can be manipulated. โ 2. Oracle manipulation Once CVT was artificially priced up, that fake price made its way into the oracle feeds and Drift treated it like a legitimate asset. So now the issue is bigger than just one fake token. The entire pricing layer became a single point of failure. โ 3. Admin key compromise Then came the human layer. Through social engineering, the attacker got admin access, listed CVT as a live market, and removed withdrawal limits. So even in a system this technical, the weakest link was still the human one. โ 4. Fast withdrawals From there, CVT got used as collateral to pull out USDC, SOL, JLP, and WBTC. $285M. Gone. The funds were moved almost immediately. Part was bridged to Ethereum: 19,913 ETH, around $42.6M Some SOL got swapped into ETH on Hyperliquid. The rest was sent to Binance. And Circle? Too slow to freeze the stolen USDC. That became a whole separate debate on its own. โ Elliptic later linked the exploit to North Korean hackers, saying the flow matches Lazarus Group behavior. The patterns were familiar: โ cross-chain laundering โ pre-positioned wallets โ test transactions before the main exploit Thatโs basically textbook Lazarus playbook stuff. For context, Lazarus stole over $2B in 2025. Bybit alone accounted for $1.46B of that. And in 2026, the pace didnโt slow down. It got worse. โ The Domino Effect This is where it turns from a Drift story into a Solana DeFi story. Before the hack, Driftโs TVL was $534M. Within an hour, it dropped to $255M. Basically cut in half. And the damage didnโt stay isolated. Solana DeFi is deeply interconnected, so when Drift broke, stress started spreading across the rest of the ecosystem too: โ protocols using Drift as collateral started feeling liquidity pressure โ DEX volumes across Solana fell back toward 2024 lows โ DRIFT dropped more than 40%, down to $0.06 โ confidence across the ecosystem took a major hit And this isnโt even the first time that pattern showed up. Back in January 2026, the Step Finance treasury hack (~$27M) triggered similar stress across connected Solana protocols. One protocol breaks and the pressure leaks everywhere else. Thatโs the tradeoff DeFi keeps running into. Composability is its biggest strength. And in moments like this, it becomes its biggest weakness.
ยท 2.3K Views
