Tools Crypto Exploit Tracker exploit-0059
Exploit record
Drift Protocol
- Loss
- $286M
- Attack vector
- Access Control
- Chain
- Solana
- Sector
- Perps
What happened
On April 1, 2026, Drift Protocol suffered a roughly $286M exploit after attackers gained unauthorised administrative control and drained multiple protocol vaults on Solana.
Early reporting indicated this was not a routine smart-contract math bug but a privileged-control failure. The attacker rapidly drained several core vaults, with stolen assets including JLP, USDC, SOL, cbBTC and wBTC. Drift suspended deposits and withdrawals while investigators traced the outflows. Later reporting from Elliptic said the laundering patterns and on-chain behaviour were consistent with previous DPRK-linked operations, though that remains an attribution claim rather than a court finding.
Sources
- Drift incident updatex.com/DriftProtocol/status/2039417136729227425
- Elliptic analysiswww.elliptic.co/blog/drift-protocol-exploited-for-286-millio…
On YFarmX
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026