Drift Protocol Breach Triggers Up to $285 Million Losses

• Drift exploit linked to compromised admin keys triggers $220M–$285M losses and halted operations.
• Large USDC flows bridged to Ethereum during exploit, with no immediate intervention.
• DRIFT drops by 42% as volume surges 354%, while no industry bailout like Bybit emerges.

Drift Protocol, a Solana-based decentralized perpetual futures exchange, reported an active security breach that resulted in losses ranging from $220 million to $285 million.

The incident prompted an immediate suspension of deposits and withdrawals, while the protocol confirmed it was coordinating with multiple security firms, bridges, and exchanges to contain the situation.

Exploit Linked to Compromised Admin Access

On-chain data shows that the first major transfer occurred at approximately 11:06 a.m., when about 41 million JLP tokens, valued at $155 million, were moved from the Drift Vault to an external wallet identified as “HkGz4K.” Further transactions involved additional transfers of SOL, stablecoins, wrapped assets, and memecoins, which were later distributed across multiple wallets.

Blockchain investigators indicated that the exploit was not caused by a smart contract vulnerability. Instead, security researchers, including PeckShield founder Jiang Xuxian, stated that the attack likely involved compromised or leaked administrative private keys, granting privileged access to the protocol. 

On-chain activity further showed that the attacker had conducted preparatory transactions, including funding test wallets and executing trial transfers in the days leading up to the breach.

Following the exploit, assets were reportedly swapped into USDC and bridged from Solana to Ethereum using cross-chain infrastructure. Wallet provider Phantom issued warnings and restricted access to the protocol interface as a precautionary measure during the investigation.

On-chain investigator ZachXBT reported that large volumes of USDC were bridged from Solana to Ethereum for several hours during the exploit via Circle’s Cross-Chain Transfer Protocol, with no immediate intervention observed during that period.

The incident has also drawn comparisons to prior industry responses to centralized exchange breaches. When Bybit experienced a security incident, multiple exchanges reportedly contributed funds to support recovery efforts, with participation linked to Bybit’s trading activity and annual turnover metrics. As of now, no similar coordinated support effort has been publicly disclosed regarding Drift Protocol.

Drift’s Token Market Reaction Following the Breach

DRIFT fell by 42.18% within 24 hours, dropping to $0.03998 from levels near $0.069 earlier in the session, according to CoinMarketCap data. The market capitalization decreased to $23.23 million, reflecting the price movement. At the same time, trading volume increased by 354.49% to $37.97 million. The sharp rise in volume alongside the price drop points to heightened volatility and panic-driven trading following the exploit.

Related: Fenbushi Co-Founder Offers Bounty for $42 Million Lost in 2022 Hack