On 1 April 2026, Drift Protocol—a Solana-based decentralized perpetuals exchange—suffered a massive on-chain loss when attackers drained protocol vaults, with press citing figures roughly in the $270–285 million range. This is not the same “Drift” as Salesloft’s chat product tracked separately in the Salesforce OAuth supply-chain incident.
What reporting emphasized
Follow-on analyses (e.g., CoinDesk) summarized a long-con operation attributed to North Korean state-linked tradecraft, including meetings under a fake quant firm persona, ecosystem vault onboarding, and eventual compromise paths into signing workflows—alongside technical discussion of Solana durable nonces and rapid asset movement across bridges/DEXes.
Canonical record: Drift Protocol 2026 on BreachHistory.
Sources: CoinDesk, SecurityWeek, TRM Labs