Country visual unavailable
No information
Drift Protocol exploit drains approximately $295.7 million and forces protocol shutdown
On 1 April 2026 attackers obtained administrative control of Drift Protocol after a social-engineering operation caused Security Council members to pre-sign transactions that later transferred authority. The attackers changed protocol parameters, introduced artificially valued collateral and withdrew USD 295.7 million in assets; Drift suspended protocol functions and required a full protocol reboot and independent audits before relaunch.
94
Estimated severity
94 / 100
92
Source reliability
92 / 100
Approximate Date
2026-04-01
Targeted Company
DRIFT PROTOCOL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
No information
Affected countries
No information
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
$295.7M
Impact types
Operational disruptionService unavailability
Affected sectors
Finance & Insurance
Affected departments
Information Technology
Attack Profile
Attack types
Data modificationSocial engineeringUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
drift.tradehttps://www.drift.trade/updates/incident-recovery-update-april-16-2026-nowchainalysis.comhttps://www.chainalysis.com/blog/lessons-from-the-drift-hack/elliptic.cohttps://www.elliptic.co/insights/drift-protocol-exploited-for-286-million-in-suspected-dprk-linked-attack/techcrunch.comhttps://techcrunch.com/2026/04/01/de-fi-platform-drift-suspends-deposits-and-withdrawals-after-millions-in-crypto-stolen-in-hack/