critical Code Vulnerability

Drift Protocol $285M Crypto Hack — DPRK Attribution Confirmed

Severitycritical
Statusopen
DateApril 1, 2026
AffectsDrift Protocol (Solana DEX) — $285M USDC, SOL, JLP, WBTC drained
Sourcethehackernews.com

Details

Largest crypto exploit of 2026. Solana DEX drained via durable nonce abuse + social engineering of 2/5 multisig signers. Traced to a six-month DPRK social engineering operation beginning fall 2025. Demonstrates nation-state capability in DeFi exploitation.