Solana DeFi Exchange Drift Protocol Exploited, Upwards of $285 Million Stolen

Solana-based decentralized speech Drift Protocol is actively experiencing an exploit that has led to the theft of much than $200 cardinal successful funds, on-chain information shows. 

The protocol, which is chiefly utilized to commercialized perpetual futures, has paused deposits and withdrawals amid the attack. 

“Drift Protocol is experiencing an progressive attack,” it posted connected X astir 3:00 p.m. ET connected Wednesday. “Deposits and withdrawals person been suspended. We are coordinating with aggregate information firms, bridges, and exchanges to incorporate the incident. This is not an April Fools joke,” the institution posted.

Reports of suspicious enactment began astir 2 hours earlier, erstwhile users noticed ample sums being transferred from the Drift Protocol vault to a Solana code opening with “HkGz4K.” 

The account’s archetypal transportation took spot astir 11:06 a.m., erstwhile astir 41 cardinal JLP tokens valued astatine $155 cardinal were transferred from the Drift Vault to “HkGz4K.” Shortly thereafter, millions much successful assorted crypto tokens were transferred to the attacker and yet distributed to different wallets. 

The address, which was archetypal funded with 1 SOL past week, whitethorn person had entree to the imaginable exploit since that time, having received a tiny transportation from the Drift Vault valued astatine astir $2.52, according to on-chain information from Solana artifact explorer, Solscan. 

After Wednesday’s exploits, full transfers from the protocol to the attacker’s code add up to much than $250 million, according to information from blockchain analytics steadfast Arkham Intelligence. 

Estimates from PeckShield Alerts bespeak that arsenic overmuch arsenic $285 cardinal whitethorn person been exploited. 

Drift Protocol has not yet identified the origin of the exploit, but on-chain researchers and information experts person suggested it whitethorn beryllium the result of an exposed backstage key, which allowed the attacker to compromise admin functionality and interaction the vaults. In different words, quality mistake and not a method one.

Jiang Xuxian, laminitis of blockchain information steadfast PeckShield, told Decrypt that onslaught relied connected gaining privileged entree to Drift's protocol.

"The admin keys down Drift were decidedly leaked oregon compromised," helium said.

Drift, which had $550 cardinal successful full worth locked, according to DefiLlama, has been connected to different firms successful the Solana ecosystem acknowledgment to the wide array of assets disposable connected its level and its DeFi capabilities.

Some, similar publically traded Solana treasury firms Forward Industries and DeFi Development Corp, person indicated that their treasuries were not impacted by the exploit. 

Other Solana-based infrastructure firms, similar wallet supplier Phantom, person implemented warnings to users who whitethorn beryllium trying to entree the Drift Protocol portion investigations are ongoing.

Drift's autochthonal token, DRIFT, is down astir 28% connected the day, precocious changing hands astir $0.049. The token has fallen much than 98% from its November 2024 all-time precocious of $2.60.

Additional reporting by André Beganski