logo

Hackers Drain $286 Million From Drift Protocol in Suspected North Korea-Linked Exploit

ID: 920340b2-4540-5ea7-a1dc-6b4ec63d5d35

STIX ID: report--920340b2-4540-5ea7-a1dc-6b4ec63d5d35

Feed Name: cybersecurityNews.com

Threat Score
90/100

Date Published: 2026-04-06

Date Updated: 2026-04-21

Author: Tushar Subhra Dutta

...
...

On April 1, 2026, Drift Protocol, a major Solana-based perpetual futures exchange, was robbed of approximately $286 million after attackers allegedly compromised administrator private keys and emptied multiple vaults; analysts attribute the incident to DPRK-linked actors based on on-chain indicators and laundering patterns, noting rapid token swaps and bridging to Ethereum to obfuscate funds and causing a sharp TVL drop and broad DeFi disruption.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.