Morning Minute: North Korea Hacks Drift for $285M

1 month ago 17

Morning Minute is simply a regular newsletter written by Tyler Warner. The investigation and opinions expressed are his ain and bash not needfully bespeak those of Decrypt. And check retired our new regular quality show covering each of the apical stories successful 5 minutes oregon less, downloadable connected Apple Pod oregon Spotify.

GM!

Today’s apical news:

Crypto majors leap connected speculation of ceasefire; BTC +4% astatine $69,500
Drift requests talks with NK hackers aft $280M exploit
Schwab is bringing crypto spot trading to its $12T platform
Coinbase received conditional support for nationalist spot slope charter
Circle is launching cirBTC to vie with WBTC

💀 North Korea Drained $285M From Drift Protocol successful 12 Minutes

Drift Protocol, Solana’s largest decentralized perp exchange, was exploited for $285 cardinal connected April 1.

As much accusation came retired astir the exploit, it seems to person been a governance attack, months successful the making, that culminated successful 12 minutes of automated draining crossed 31 accelerated withdrawals.

The setup started successful October 2025 erstwhile attackers posing arsenic a quantitative trading steadfast approached Drift contributors astatine “a large crypto conference.” Over six months they built existent relationships with protocol insiders successful person, astatine aggregate manufacture events. When the clip came, they utilized that entree to socially technologist multisig signers into pre-approving hidden transactions - done a Solana diagnostic called durable nonces that allowed the authorizations to beryllium dormant for weeks. They besides manufactured a fake token (CarbonVote/CVT) with a fewer 1000 dollars successful seeded liquidity and lavation trading, past utilized it to manipulate Drift’s terms oracles into treating it arsenic morganatic collateral worthy hundreds of millions.

Elliptic and TRM Labs some flagged DPRK involvement, making this allegedly the 18th North Korean crypto onslaught of 2026, with implicit $300M stolen truthful acold this twelvemonth alone.

Key Details:

Drift was exploited for $285M connected April 1 successful the largest DeFi hack of 2026 and the second-largest successful Solana past down the $326M Wormhole hack successful 2022
The attack: atrocious actors manufactured a fake token (CVT), manipulated oracles to dainty it arsenic existent collateral, and utilized pre-signed durable nonce transactions to drain vaults crossed 31 withdrawals successful 12 minutes
Six-month operation: attackers posed arsenic a quant steadfast astatine crypto events starting October 2025, cultivating spot with Drift contributors successful idiosyncratic earlier accessing admin keys via societal engineering
DRIFT token fell implicit 40%; TVL collapsed from ~$550M to nether $250M; a twelve Solana protocols with Drift dependencies paused operations
Circle controversy: $232M successful USDC bridged to Ethereum via Circle’s CCTP; ZachXBT said Circle could person moved faster to frost funds; Circle says it lone freezes assets erstwhile legally required

🏦 Schwab Is Coming for Coinbase

Charles Schwab confirmed to Decrypt this week that spot BTC and ETH trading is launching this quarter.

The steadfast manages $12.2 trillion successful lawsuit assets. The brokerage that millions of Americans already usage for their status accounts and banal portfolios is astir to fto them bargain Bitcoin successful the aforesaid interface, nary abstracted wallet, nary abstracted speech account, nary caller app.

This is antithetic from an ETF. Schwab clients volition ain spot Bitcoin directly, held via Charles Schwab Premier Bank. The rollout is phased: employees first, past invited clients, past afloat public.

Every American with a Schwab relationship is astir to person nonstop BTC and ETH entree alongside their S&P 500 scale funds by the extremity of June.

Key Details:

Charles Schwab confirmed spot BTC and ETH trading launching Q2 2026; $12.2 trillion successful AUM
Schwab Crypto account leafage is unrecorded connected the firm’s website; waitlist unfastened for aboriginal access
Structure: nonstop spot ownership via Charles Schwab Premier Bank SSB - not ETFs, not futures; BTC and ETH lone astatine launch

⚛️ Google Just Moved the Q-Day Timeline

Google published a insubstantial this week demonstrating that quantum computers could ace elliptic curve cryptography (the cryptographic instauration of Bitcoin and Ethereum) utilizing astir 20 times less qubits than antecedently believed.

The hardware required inactive doesn’t exist, but the level for what’s required conscionable dropped significantly.

Google consulted the US authorities earlier publishing and utilized zero-knowledge proofs truthful outsiders could verify assets estimates without seeing the underlying onslaught circuits - a motion of conscionable however superior this substance is.

Ethereum Foundation researcher Justin Drake, who joined the insubstantial arsenic a precocious co-author, enactment a fig connected it: astatine slightest 10% accidental that by 2032 a quantum machine recovers a Bitcoin backstage cardinal from an exposed nationalist key.

Key Details:

Google’s paper boosted estimated Q-Day likelihood by showing elliptic curve cryptography could beryllium cracked with ~20x less qubits than antecedently believed — nether 500,000 carnal qubits
Bitcoin vs. Ethereum exposure: Bitcoin’s onslaught model is ~10 minutes per transaction; Ethereum’s relationship exemplary permanently exposes nationalist keys erstwhile a transaction is sent, giving attackers unlimited time
Google estimates the 1,000 wealthiest exposed Ethereum accounts (~20.5M ETH) could beryllium cracked successful nether 9 days connected a sufficiently precocious quantum machine
Practical proposal now: halt reusing Bitcoin addresses; migrate to Native SegWit (bc1q) oregon Taproot (bc1p); support backstage keys offline successful acold storage

🏛️ Coinbase Just Got a Federal Banking Charter

Coinbase received conditional support from the Office of the Comptroller of the Currency for a nationalist spot slope charter this week.

This does not mean that Coinbase is becoming a bank, but it does get national regulatory uniformity for custodying assets crossed each 50 states, replacing a state-by-state patchwork that has created friction for organization clients and caller merchandise launches.

The OCC charter means Coinbase operates nether a azygous national regulator alternatively than navigating 50 antithetic authorities licensing regimes for custody. The banks are warring this, with the ICBA and BPI some filing absorption letters including the BPI arguing the support would “exceed the OCC’s authorization nether national law.” The crypto-to-bank pipeline is getting real, and accepted banking is not blessed astir it.

Key Details:

Coinbase received conditional approval from the OCC for a nationalist spot slope charter - not a commercialized bank, nary deposits, nary fractional reserve banking
Coinbase already had a NYDFS constricted intent spot charter since 2018 - this is the national upgrade that removes the state-by-state patchwork
The field: Circle, Ripple, Paxos, Bridge (Stripe), and Crypto.com each received conditional OCC support earlier Coinbase; Anchorage Digital was archetypal with a afloat charter successful 2021
Payments flagged explicitly successful Coinbase’s blog station arsenic the halfway enlargement country the charter enables

₿ Circle Is Coming for the Wrapped Bitcoin Market

Circle, the institution down USDC, is launching cirBTC as a wrapped Bitcoin token backed 1:1 by autochthonal on-chain Bitcoin reserves. It launches archetypal connected Ethereum mainnet and Arc, Circle’s ain stablecoin-focused blockchain.

The transportation from Circle VP of merchandise Rachel Mayer: “Bitcoin is sitting connected the sidelines of DeFi. Not due to the fact that radical don’t privation output oregon liquidity - it’s due to the fact that they don’t spot the wrapper.”

The wrapper spot occupation is real. WBTC, the ascendant wrapped Bitcoin with ~$8 cardinal successful marketplace cap, has faced scrutiny implicit its custody arrangements. Coinbase launched cbBTC past twelvemonth and past delisted WBTC from its exchange. cbBTC present has ~$6 cardinal successful marketplace cap. Circle is entering this marketplace with its organization credibility argument: the aforesaid infrastructure that backs USDC, present applied to Bitcoin. It’s a beardown pitch…

Key Details:

- Circle announced cirBTC, a wrapped Bitcoin token backed 1:1 by autochthonal on-chain Bitcoin reserves; launching archetypal connected Ethereum mainnet and Arc
- Competition: BitGo’s WBTC (~$8B marketplace cap) and Coinbase’s cbBTC (~$6B marketplace cap) are the existent ascendant products
- cirBTC integrates natively with USDC and Circle Mint; ETH mainnet and Arc astatine launch; broader concatenation enactment expected
- CRCL stock is down ~40% implicit six months to ~$90; cirBTC is portion of Circle’s propulsion to grow beyond stablecoins into broader crypto infrastructure

🌎 Macro Crypto and Markets

Crypto majors rallied overnight arsenic speculation of ceasefire rises; BTC +4% astatine $69.5k; ETH +5% astatine $2,150; SOL +3% astatine $82; HYPE +4% astatine $37.20
FIL (+8%), ARB (+8%), and TAO (+8%) led apical movers
Oil -2% astatine $110; Gold +1% astatine $4,700
Bitcoin closed Q1 2026 arsenic its worst 4th since aboriginal 2018, shedding 22% arsenic war, tariffs, and a hawkish Fed drove prices lower
FIFA named ADI Predictstreet as its archetypal authoritative prediction marketplace spouse for the 2026 World Cup, skipping Polymarket and Kalshi successful favour of an unproven newcomer built connected an Ethereum L2
New Attorney General Todd Blanche held Bitcoin but continued prosecuting crypto bundle developers nether his tenure arsenic lawman AG; Trump fired Pam Bondi and elevated Blanche to tally the DOJ past week

Corporate Treasuries & ETFs

The Bitcoin ETFs saw $22M successful nett inflows over past week, portion the ETH ETFs had $42M successful nett outflows
Riot Platforms sold $250M successful Bitcoin during Q1 (3,778 BTC astatine an mean terms of $76,000), its 2nd consecutive 4th of income arsenic it pivots toward AI infrastructure; holdings present 15,680 BTC
Saylor’s STRC was astatine $100 oregon above across 3 days past week for the archetypal clip since the aboriginal March run

Meme Coin Tracker

Meme leaders were very greenish outpacing majors; DOGE +3%, SHIB +4%, PEPE +6%, TRUMP +3%, PENGU +8%, SPX +12%, FARTCOIN +8%
No notable top movers onchain

💰 Token, Airdrop & Protocol Tracker

The Ethereum Foundation staked 45,034 ETH worthy ~$93M Friday, bringing its full staked presumption to ~69,500 ETH, astir completing the 70,000 ETH people it announced successful February
Dmail Network is shutting down May 15 after 5 years, citing unsustainable decentralized infrastructure costs, failed monetization, financing failures, and halfway squad departures (DMAIL token -70%)

🚚 What is happening successful NFTs?

NFT leaders were mostly greenish aft OpenSea farming ended; Punks adjacent astatine 28.8 ETH, Pudgy +3% astatine 4.3 ETH, BAYC +7% astatine 6.3 ETH; Hypurr’s adjacent astatine 400 HYPE
Catzo (+40%) and MAYC (+9%) led notable movers