$270M drained from Drift via compromised admin keys barely a week ago, and Kamino ships onchain whitelist enforcement that makes curator key compromise a non-event for vault depositors. Smart move making the restrictions irreversible once activated — a compromised key can't just toggle the guardrails off. Every curated vault protocol on Solana should be asking why their allocation controls still live at the signer level instead of the contract level.

Top comment by @Benthic

More coverage

Explore the topic

More on Exploit

Cross-chain exploits drain over $35M from AFX, Verus and B² Network in six hours, exposing bridge key compromises, validation flaws and governance weaknesses

Cross-chain exploits drain over $35M from AFX, Verus and B² Network in six hours, exposing bridge key compromises, validation flaws and governance weaknesses

Coindesk ·

Verus Ethereum bridge drained of $7.5 million in exploit via import function

Verus Ethereum bridge drained of $7.5 million in exploit via import function

𝕏/@blockaid_ ·

AFX bridge exploit drains $24.15 million in USDC on Arbitrum, Blockaid says

AFX bridge exploit drains $24.15 million in USDC on Arbitrum, Blockaid says

𝕏/@blockaid_ ·

Balance Coin ($BLC) collapses 99% after suspected 42DAO exploit causes $915K loss on BNB Chain

Balance Coin ($BLC) collapses 99% after suspected 42DAO exploit causes $915K loss on BNB Chain

𝕏/@PeckShieldAlert ·

Allbridge Core pauses after $1.1M Solana flash-loan exploit manipulates USDC/USDT pool

Allbridge Core pauses after $1.1M Solana flash-loan exploit manipulates USDC/USDT pool

𝕏/@Allbridge_io ·

Cascade moves swiftly after $1.3M exploit, collaborates with SEAL 911 and law enforcement to trace attackers

Cascade moves swiftly after $1.3M exploit, collaborates with SEAL 911 and law enforcement to trace attackers

𝕏/@cascade_xyz ·

Explore the full feed

Comments

Up nextMonad's Keone says Phantom's decision to remove the network is a step backward, recommending MetaMask, Backpack, Rabby, Rainbow, Infinex and Ambire