Drift loses $280 million North Korean hackers seize Security Council powers

Drift Protocol suffered a sophisticated exploit in which attackers obtained 2/5 multisig approvals, used durable nonce accounts and pre-signed transactions to time a takeover of Security Council admin powers, introduced a malicious asset, removed withdrawal limits, and drained approximately $280M–$285M; blockchain firms (Elliptic, TRM Labs) attributed the activity to North Korean-aligned actors based on on-chain indicators such as Tornado Cash usage, CarbonVote timing, cross-chain bridging, and rapid laundering, and the platform is working with security firms and law enforcement while freezing protocol activity and investigating.