logo

Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK

ID: 616e2ff4-95e1-5318-a174-908323cf7d2d

STIX ID: report--616e2ff4-95e1-5318-a174-908323cf7d2d

Feed Name: The Hacker News

Threat Score
92/100

Date Published: 2026-04-03

Date Updated: 2026-04-24

Author: [email protected] (The Hacker News)

...
...

**Executive Summary:** On April 1, 2026, the Solana decentralized exchange Drift suffered a sophisticated compromise in which attackers used durable nonce pre-signed transactions and social engineering to obtain multisig/admin control, deploy a fake asset (CarbonVote Token), remove withdrawal limits, and drain approximately $285 million; blockchain firms report on-chain indicators and laundering consistent with DPRK-linked actors and note related supply-chain compromises attributed to UNC1069.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.