🐳 Daily Edition: Drift Protocol Hacked for $250M+

A compromised admin key allowed attackers to steal hundreds of millions in seconds, over half of all funds held on Drift

Today might be April Fools but it’s been anything but a joke for Drift Protocol, a major perpetuals exchange on Solana, which suffered a $270M exploit just a few hours ago. Representing about half of the TVL on the platform, it’s unclear exactly how many customer assets might have been affected or how they will proceed from here.

The attack was premeditated, compromising one of the admin keys which gave them full control over market creation, oracles (responsible for setting prices), and withdrawal limits. They used this power to create a market for their own valueless token called “CVT”, enable borrowing power at 100%, and disable any relevant security measures that could prevent the attack.

Vocal Drift Advocate’s Thoughts on Security vs Speed

The exploiter then set the oracle price to $11 and deposited their worthless tokens, which the exchange now valued at hundreds of millions of dollars. In just 15 seconds, over $250M was stolen. Most of that amount has now been bridged to Ethereum, with a significant chunk moving through USDC. As most crypto natives know by now Circle seems not to care about its duties to freeze stolen funds, so the attackers were able to move unencumbered. Pretty ironic that the most regulated stablecoin company is the most relaxed on crime!

Aside from the Drift exploit, today was pretty green as the market seems to sense the end of the Iran war is near. If that truly is the case, as we mentioned in a recent edition, we can probably expect the bottom on BTC and the rest of our favorite coins to be in.

Interesting…

Check out our latest articles below!

Disclaimer

The content on this site is for informational purposes only and should not be construed as investment advice. While Beluga strives to ensure the accuracy and timeliness of information, there may be discrepancies when comparing our data to that of financial institutions, service providers, or specific product websites. Always consult with a professional before making any financial decisions. Will McKinnon is the Head of Content for Beluga and has spent every day for many years trading coins. For that reason there are too many to name, however his largest holdings by a significant margin are Ethereum and Bitcoin. NFA DYOR