Il y a 1 h
Drift details $280M April 1 exploit, cites six-month social engineering tied to DPRK-linked actors
Drift Protocol released a detailed Saturday update on its April 1 incident that drained about $280 million from its Solana perpetuals exchange, describing a roughly six-month social engineering campaign that began around fall 2025. The attackers allegedly posed as a quant firm, met contributors at multiple conferences, and deposited over $1 million into an Ecosystem Vault before obtaining pre-signed approvals and taking control within minutes. Drift and SEAL 911 said they have “medium-high” confidence the operation matches the North Korea-aligned actors behind the $50 million Radiant Capital hack in October 2024, while Mandiant has not yet issued formal attribution.