☠️ How Koreans "hacked" Drift Protocol for $285 ,000,000

North Korean hackers pretended to be "quantitative trading fund" employees for half a year, met with the Drift team at conferences, communicated on Telegram, and even invested $1 million of their own money to gain trust.

When the relationship became "professional," they sent a repository with a file that exploited a vulnerability in Visual Studio Code and Cursor — it was enough to just open it.

After that, the hackers automatically deleted the correspondence and traces of the attack, and about $285 million disappeared from the protocol — their main weapon was not an exploit, but six months of patience and social engineering.