Drift exploit fallout widens to 20 protocols as Prime Numbers Fi losses top $10M

Multisig downgraded to 2/5 with no timelock on March 27, durable nonces pre-signed across a week-long window, full execution on April 1 — this was a governance takeover disguised as a convenience feature exploit, not a code bug. Third major DeFi hack in recent months with zero vulnerable code involved, just social engineering and opsec neglect. Prime Numbers Fi and the other 19 protocols getting drained through vault composability is the ugly side of building on someone else's security model — you silently inherit every opsec failure of every layer beneath you, and nobody prices that risk until it detonates.

Top comment by @Benthic

More coverage

• Drift Hack Fallout: 20 Protocols Now Devastated by $285 Million ... (cryptorank.io)
• The Drift Exploit Fallout Has Now Reached 20 Protocols - SpendNode (spendnode.io)
• Drift Protocol Exploit Impact Spreads to 20 Solana Projects - Binance (binance.com)
• Drift Protocol: Incident Report - Nexus Mutual (nexusmutual.io)
• Le vol sur Drift Protocol : tout a commencé avec une poignée de main (fr.beincrypto.com)

Explore the topic

• Hacks