Drift protocol (DRIFT)

Now I'm just grateful that a few months ago, in order to earn interest with $usd1, I consolidated most of the unused assets on-chain and swapped them to $usd1 to earn annualized returns on an exchange... Bear market protocol thefts are all too common, whether due to insiders stealing or actual hacks. Unless you have a solid security plan or can arbitrage on-chain, I don't really recommend keeping money in protocols you're not familiar with. Not to mention, many protocols initially signed third‑party agreements with whales, guaranteeing compensation. So it's better to pull the money off-chain, either put it on an exchange or in your own wallet or a cold wallet—safer that way. Converting to $usd1 and earning interest is pretty good

Drift Protocol $270‑$285 million heist full analysis: when it was announced, most people thought it was an April Fool's joke! Should Sol consider a rollback? So far this has become the largest DeFi hack of 2026 (we still have eight months, hoping there won’t be a bigger one). 1️⃣ What happened? Yesterday afternoon, the top Derivatives protocol in the Solana ecosystem, Drift Protocol (perpetual contract DEX), suffered a composite attack that compromised admin privileges. In just 12 minutes, the attacker drained about $270‑$285 million of real assets from the protocol’s main treasury (estimated by major firms such as PeckShield, Bloomberg, Lookonchain, etc.). The team quickly confirmed an “active attack”, paused all deposits and withdrawals, and emphasized that “this is not an April Fools joke”. This is the largest‑value DeFi incident so far this year and the second‑largest security incident in Solana history (only behind the 2022 Wormhole bridge hack of $326 million). 2️⃣ How did the hacker do it? 1) Preparation (weeks before) The attacker minted fake tokens and fabricated price history to set up later manipulation. 2) Attack launch (around 00:00 UTC+8 on April 1) Using a compromised Drift admin private key (multisig key leaked), the attacker performed critical operations in a single transaction: added a fake market and removed the withdrawal guard threshold. 3) Deposited massive fake collateral. Then 31 withdrawal transactions moved assets from multiple vaults (JLP Delta Neutral, SOL/BTC Super Staking, etc.) within 12 minutes. 4) Main stolen assets (on‑chain confirmed): JLP ≈ $155.6 million USDC ≈ $60.4 million cbBTC, WETH, WBTC, FARTCOIN, JitoSOL, etc. Total $270‑$285 million. Money laundering (1‑2 hours after the attack) was done through the Jupiter aggregator, swapping to USDC. The funds were bridged to Ethereum, where most were used to buy ETH (approximately 20,000 ETH purchased). Primary hacker address: HkGz4KmoZ7Zmk7HN6ndJ31UJ1qZ2qgwQxgVqQwovpZES (viewable on‑chain). 3️⃣ Impact on the crypto space: First, Drift’s TVL was cut in half within an hour (from about $550 million to ~$255 million), pushing the protocol’s liquidity toward collapse. The DRIFT token also plunged, with a peak drop of 30‑35% and still sitting at low levels. Then a cascade of effects: several protocols that rely on Drift for yield (such as Reflect, DeFiCarrot, Pyra, etc.) have paused redemptions, leaving user funds stuck. Market sentiment: concerns over “admin key = single point of failure” in DeFi have intensified. In the short term, funding for Solana DeFi projects and user confidence are likely to suffer, and TVL for DEX projects may also be affected. 4️⃣ Industry warning: I’ve basically seen it coming; it proves once again that even the strongest smart contracts can’t survive a stolen admin key. What should ordinary users/investors watch out for? 1) Act now: If you have funds on Drift, you cannot deposit or withdraw at the moment. Keep monitoring the official @DriftProtocol. The Phantom wallet has blocked Drift‑related accesses to avoid accidental actions. 2) Long‑term risk mitigation (must‑read): Admin privileges are the biggest risk: prioritize highly decentralized protocols (multisig + timelock + DAO governance) and avoid those controlled by a single admin key. Don’t chase TVL and APY alone: high yields often come with high risk, especially projects that depend on a single oracle or vault. Fund management: diversify perpetual/leverage positions; use hardware wallets + multisig for large amounts; regularly review protocol audit reports and multisig members. Bridge caution: hackers love to move funds through bridges; use small test amounts or official bridges. Information sources: trust only official accounts and on‑chain data (Solscan / Arkham / Lookonchain); ignore any “compensation airdrop” scams. 5️⃣ Future watch‑points and lessons for us: It’s already very tough; whether Drift can recover part of the funds (Circle may freeze some USDC) remains to be seen. Honestly, this was a human‑caused disaster: an admin key compromise leading to a permissions catastrophe. DeFi has been around eight years but is still early; security always outweighs yield. Crypto survival rule #1: Never your keys, never your coins — this was brutally proven again.

Yesterday Drift was stolen of about $270 million, representing half of its TVL. This was not a surprise; the hacker had prepared the wallet a week in advance, and the funds are currently flowing to Binance and cross‑chain protocols. Key points: • $DRIFT plummeted, and market panic continues to spread. • Contagion risk: downstream protocols such as reflectmoney, project0 and 8 others have been affected and are suspended. • It is recommended that everyone immediately check their wallets and withdraw any LP exposure involving Drift. The bear market is too real; no matter how high the returns, a zero can happen in a second. In the face of this premeditated attack, ordinary retail investors have no means. 😭 Everyone protect their principal; safety first.

Drift Protocol was attacked, with losses exceeding $285 million.\n.\nOn April 1, 2026, users began noticing a large sum being transferred out of the Drift Vault to an unfamiliar wallet starting with \"HkGz4K\".\n.\nThis wallet was created a week earlier, initially with only 1 SOL, and had received a test deposit of $2.52 from the Drift Vault before everything happened.\n.\nThe first transfer was over 41 million JLP tokens worth $155 million, followed by other assets being moved continuously before being distributed to other wallets.\n.\n@DriftProtocol confirmed on X that it is indeed under attack, immediately halted deposits and withdrawals, and coordinated with several security firms, bridges, and exchanges.\nand emphasized \"This is not an April Fools joke\".\n.\nArkham Intelligence reports total losses exceeding $250 million, while PeckShield estimates they could be as high as $285 million.\n.\nDrift has not officially stated the cause, but on-chain analysts and security experts point to a possible private key leak that gave the attacker admin-level access.\n.\nJiang Xuxian, founder of PeckShield, told Decrypt that it was likely human error rather than a code vulnerability.\n.\nDrift had over $550 million in the system before the incident and is connected to multiple platforms in the Solana ecosystem.\n.\nPhantom Wallet immediately blocked access to Drift, and DeFi Development Corp and Forward Industries affirmed they were not affected.

I usually wake up at noon, but today around 9 am I just couldn't fall asleep... I checked my phone and saw in the group that @DriftProtocol had been hacked I thought I hadn't suffered any loss... but just now when I opened my wallet, one of the wallets was still compromised, I feel like the sky is falling 🥲 https://t.co/EyyFb7zgOj https://t.co/qCFiTQD0L3

🚨 In the past few hours, Drift Protocol (Solana DeFi) was hacked. On-chain data shows that approximately $285 million has been withdrawn from the protocol, mainly SOL, USDC and other assets. Drift confirmed an ongoing attack and halted deposits and withdrawals. The exact cause has not been confirmed yet; speculation includes a smart‑contract exploit or compromised keys. The stolen funds have already been distributed across multiple wallets and partially swapped. The DRIFT token immediately suffered a sharp drop and the protocol’s liquidity has significantly decreased. This could become one of the biggest DeFi hacks of 2026. If you have used Drift: check and revoke wallet approvals, refrain from interacting with the protocol for now, and await official updates.

🎙️ Who would you want to hear from tomorrow about the Drift Protocol hack? 👇🏻

UPDATE: The Drift Protocol exploit losses have now reached $285M $DRIFT is down over 20% following the exploit https://t.co/7gExjgCB71 https://t.co/an4OtIVsyV