North Korea–linked hackers drain $285M from Drift in sophisticated attack

Drift, a Solana-based decentralized exchange, lost about $285M on April 1, 2026 in a highly sophisticated attack likely linked to North Korea; attackers pre-signed durable nonce transactions, compromised multisig approvals to obtain admin control, drained multiple vaults within seconds to an hour, and quickly laundered funds through swaps and cross-chain transfers while Drift works with law enforcement and security firms to trace and freeze assets.