The recent hack of Drift Protocol marks one of the most sophisticated and damaging DeFi exploits of 2026, with losses estimated at around $285–$286 million.

Unlike traditional smart contract bugs, this attack exploited governance and human vulnerabilities. Hackers used social engineering to trick multisig signers into pre-approving malicious transactions, while also leveraging a Solana feature called “durable nonce” to execute them later. This was combined with the creation of a fake collateral token, which was falsely valued by oracles, allowing attackers to withdraw real assets at scale.
The breach occurred rapidly—within minutes, multiple vaults were drained, and funds were quickly converted and bridged to other blockchains, primarily Ethereum.
Investigations suggest links to North Korean hacking groups, highlighting the growing geopolitical dimension of crypto crime.
This incident exposes a critical weakness in DeFi: security failures often stem from governance design rather than code. It underscores the urgent need for timelocks, stronger multisig controls, and real-time monitoring. Ultimately, the hack may accelerate institutional demand for stricter risk frameworks across decentralized finance.