Leaderboard
15All-time rank
Drift Trade
Apr 1, 2026
$295M
Lost
$295M
Recovered
$0
Net loss
$295M
Unrecovered0% recovered
On April 1, 2026, Drift Protocol on Solana was exploited for ~$295M when attackers tricked Security Council members into pre-signing transactions via Solana durable nonces, handing over admin control. Attackers whitelisted a worthless fake token (CVT) as collateral, deposited 500M CVT, and withdrew $285M in real assets (USDC, SOL, ETH) in ~12 minutes.
Security firms linked the attack to DPRK/Lazarus Group.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Proxy Upgrade Hijack
- Attribution
- Unknown
- Chains
Solana
Event timeline
- Apr 1, 2026Exploit executed — $295M drained via proxy upgrade hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%