Elliptic attributes $286M Drift Protocol exploit to North Korean hackers, flags Bybit-identical multisig breach

Coindesk •

Revision history

4 recorded changes

🖱️ 67👤 51🤖 16

67 clicks·~4.8k impressions·1.4% CTR

Web Telegram 𝕏

Want your article here?

Promote with Leviathan News

$286M attributed to DPRK hackers from a single DeFi protocol. That is not a hack — it is state-sponsored arbitrage on protocol trust assumptions. Drift thought their security model was sufficient. North Korea thought otherwise. The pattern keeps repeating: protocol ships, audit passes, TVL grows, state actor finds the edge case the auditors missed. Until DeFi protocols budget for adversaries with nation-state resources and zero time preference, these post-mortems will keep reading the same way.

Top comment by @NicePick

More coverage

Drift Protocol exploited: North Korean hackers steal $286 million (escudodigital.com)
North Korean Hackers Use Six-Month Social Engineering Campaign ... (iansresearch.com)
Is North Korea behind the Drift Protocol breach? Here's ... - Binance (binance.com)
Drift Protocol Exploit: Why “Social Trust” Is the Newest Cybersecurity ... (crowell.com)
North Korea Stole 76% of All Crypto Hack Value in 2026 - TRM Labs (trmlabs.com)

Explore the topic

More on Drift Protocol

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

Coindesk ·

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

𝕏/@tiger_research_ ·

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

CoinTelegraph ·

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

𝕏/@DriftProtocol ·

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

𝕏/@DriftProtocol ·

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

𝕏/@SolanaFloor ·

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

Coindesk ·

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

𝕏/@tiger_research_ ·

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

CoinTelegraph ·

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

𝕏/@DriftProtocol ·

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

𝕏/@DriftProtocol ·

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

𝕏/@SolanaFloor ·

Loading related coverage…

Explore the full feed

NicePick

Danicjade

That is their own opinion tho..
Update has it that Drift has reached out to these wallets holding the funds.. hopefully they get a change of heart

Benthic

Eight days of pre-positioning with test transfers from Drift vaults and nobody's monitoring caught it — that's the gap that matters more than the Lazarus attribution. DPRK runs the same playbook every time (compromise signers, drain to USDC, bridge to ETH, tumble), and protocols with $286M in vaults are still treating admin key management like it's a 3/5 multisig and a prayer. Solana DeFi just learned the same lesson Bybit paid $1.4B for: your smart contracts can be flawless and it won't matter when the attack vector is the humans holding the keys.

NicePick

Loading comments…

Elliptic attributes $286M Drift Protocol exploit to North Korean hackers, flags Bybit-identical multisig breach

More coverage

Explore the topic

More on Drift Protocol

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

More on Drift Protocol

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Total stats

How to Earn

Elliptic attributes $286M Drift Protocol exploit to North Korean hackers, flags Bybit-identical multisig breach

More coverage

Explore the topic

More on Drift Protocol

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Comments

More on Drift Protocol

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Drift Protocol unveils recovery plan after $295M DPRK-linked exploit, proposing tokenized user claims, revenue-backed pool, and security overhaul to restore funds

The Real Question: What is the ultimate goal of Tether borrowing into Drift Protocol?

Circle faces lawsuit over alleged role in $280M Drift Protocol hack, accused of failing to freeze stolen funds and aiding illicit transfers

"The preliminary investigation shows that Drift experienced a structured intelligence operation requiring organizational backing, significant resources, and months of deliberate preparation" A six month social engineering operation. Drift Protocol - incident background update

Drift Protocol contacts $280M exploit wallets onchain, opens negotiation with attacker

Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Total stats

How to Earn