$287,000,000 Drift protocol hack didn’t happen overnight; it was planned for 6 months.

It started in late 2025.
A group approached Drift at conferences, posing as a legit trading firm.
They knew the product, asked the right questions, and slowly built trust.
They didn’t rush anything.
They joined calls, asked smart questions, and even deposited $1M+ into Drift.
Everything looked normal.
Then they went deeper.
More meetings. More conversations.
By early 2026, they were no longer outsiders; they were trusted.
Then came the setup.
They shared links, code repositories, and even a TestFlight app.
All of it looked standard for crypto collaboration.
But this is where things changed.
One wrong click.
One cloned repo.
One installed app.
That’s all it took.
On April 1st, the attack was executed.
$287M drained.
And right after it happened…
they disappeared.
Chats wiped.
Tools deleted.
No trace left behind.
Now investigators believe this wasn’t random.
This was a coordinated operation, planned for months,
possibly linked to state-backed actors.