“Drift Stolen $285 Million: Did the Hacker Deliver a Fatal Shot to Bear-Market DeFi?” (Author: Wu Says Blockchain)

This article reviews the entire process of the roughly $280 million–level attack that the Solana leading derivatives and lending all-in-one protocol Drift faced in early April 2026: the attacker did not exploit a smart contract vulnerability, but instead used durable nonce pre-signing and social engineering to infiltrate a multi-signature approval chain; after taking over the Security Committee’s permissions, they “rewrote the rules,” introduced malicious assets, increased collateral weightings, and removed withdrawal restrictions—carrying out a systematic siphoning of the existing funds. Read more: