drift

Сообщение от ChainCatcher, согласно мониторингу аналитика по блокчейну PeckShield (@PeckShieldAlert), адрес, помеченный как "Drift Exploiter", внес 23,095.1 ETH (примерно 44.4 миллиона долларов) в Tornado Cash для смешивания монет и дополнительно перевел 0.85 ETH на Bybit.

Сообщение ChainCatcher, согласно мониторингу Onchain Lens, после атаки на Drift Protocol в апреле на Solana на сумму 285 миллионов долларов, злоумышленники начали переводить средства через Tornado Cash после того, как деньги находились в покое в течение 3 месяцев.Злоумышленники быстро вносят ETH в Tornado Cash Router партиями по 100 ETH, происходят несколько переводов каждую минуту.

Сообщение от ChainCatcher, согласно официальным данным, поддерживаемый a16z протокол стабильной валюты Reflect объявил о запуске независимого добровольного плана восстановления для держателей позиций USDC+, пострадавших от хакерского инцидента Drift (ныне Velocity) в апреле: с сегодняшнего дня открывается 180-дневное окно, в течение которого держатели могут добровольно продать свои позиции Palindrome Engineering по цене 0.2 USDC + 80 Reflect Credit (RC) за единицу, с полной расчетной цепочкой.Этот план финансируется Palindrome заранее и полностью независим от процесса восстановления Drift. Участие в плане подразумевает отказ от права на регресс к Drift в обмен на немедленную определенность ликвидности; неучастие позволяет продолжать поддерживать канал восстановления DFX Drift.

Сообщение ChainCatcher, согласно официальным данным, платформа для торговли бессрочными контрактами Drift сегодня объявила о своем официальном переименовании в Velocity и заявила, что это обновление бренда направлено на отражение новой архитектуры торговой платформы, которую она строит.Команда отметила, что в рынке бессрочных контрактов скорость исполнения и направление оценки имеют решающее значение, и название "Velocity" призвано отразить скорость торговли и рыночную динамику, а также обозначить переход платформы в стадию перезапуска.Официальные лица заявили, что это переименование также представляет собой четкое разделение продуктовой линии: новая платформа будет иметь более четкую системную архитектуру, более мощную инфраструктуру безопасности и более четкое позиционирование продукта. В настоящее время Velocity продвигает работы по реконструкции и планирует в ближайшие дни открыть закрытое тестирование для некоторых партнеров и трейдеров, чтобы проверить стабильность и производительность нового поколения системы торговли бессрочными контрактами на базе Solana.

Сообщение ChainCatcher, согласно официальным данным, Pyra заявила, что после оценки всех возможных вариантов компания решила постепенно закрыть бизнес. Официальные лица сообщили, что инцидент с уязвимостью Drift оказал серьезное влияние на их бизнес и пользователей, и, несмотря на то, что в течение последних нескольких месяцев они продолжали искать пути для продолжения работы, в конечном итоге не смогли найти устойчивое решение.

Drift Protocol stated that its current top priority is to restart the platform and restore revenue-generating capabilities to expedite the recovery process of user funds. After the platform restarts, it will become the largest USDT-based perpetual contract trading platform on Solana, and the related revenue will be used to support a specially established user compensation fund.Drift claims that substantial progress has been made in the restart efforts with strategic support from Tether and other partners. To enhance security, Drift announced the appointment of Noah Prince, the former head of engineering at Helium Protocol, as the protocol lead, responsible for protocol restructuring and security system upgrades.Meanwhile, former members of the Gauntlet team have also joined the restart efforts, providing risk management and treasury design support for the platform, including clearing engine reviews, funding rate optimization, market parameter adjustments, and ongoing risk monitoring. Additionally, Drift has hired the cybersecurity company Mandiant to conduct an independent forensic investigation of the attack incident.The investigation results indicate that this attack can be clearly attributed to the North Korean hacker group UNC6862, which is associated with multiple cyber attack operations. Drift stated that it will continue to prioritize security in advancing the platform restart and will announce the user compensation mechanism and specific timeline in the future.

Drift Protocol stated on platform X that after the protocol is restored online, users who have staked in the Insurance Fund will be able to withdraw their corresponding shares normally. The Insurance Fund is designed to maintain the protocol's solvency in the event of liquidation or bankruptcy. Since the protocol was paused before losses were completed through normal liquidation or bankruptcy processes, the Insurance Fund was not affected by the related vulnerabilities or attacks.Drift Protocol added that the assets of the protocol's own Insurance Fund will be used to support system restart and user recovery, and plans to publicly disclose the relevant on-chain addresses so that the community can track the use of funds and subsequent deployments.

The co-founder of the Solana ecosystem DeFi project Ranger Finance, cobra (@barrett_io), posted on the X platform that Ranger Finance is gradually shutting down. The project took on business beyond its sustainable capacity, and the founder invested personal funds to maintain operations, but delays in financing led to the accumulation of bills. Ultimately, the financing was unsuccessful, and the raised funds were returned.The team is trying to fairly pay employees and suppliers with the remaining two months of operating funds, but it is insufficient to cover all expenses. The treasury liquidation was unexpected and severely impacted budget decisions. Subsequently, the Drift attack incident depleted the remaining funds and personal capital. Treasury users affected by the Drift attack will receive recovery tokens when distributed by the Drift team. The founder stated that in hindsight, the project should have been shut down earlier and apologized for this.

According to CoinDesk, Drift Protocol has announced a user recovery plan for the approximately $295 million security breach on April 1, attributed to a North Korean-backed hacker group.The core of the recovery plan is to issue receipt tokens representing verified user losses, with each token representing $1 of verified loss, which holders can redeem based on the value of the recovery pool accumulated over time. The initial funding for the recovery pool is approximately $3.8 million, and it is expected to grow through exchange revenue of up to $127.5 million, Tether support, and up to $20 million from partners, until it covers the total loss of approximately $295.4 million.Drift has frozen about $3.36 million USDC and launched a public bounty to recover 10% of the assets. Drift plans to relaunch on a "security-first" exchange in the second quarter. Legal recovery efforts are still ongoing.

In less than three weeks, 12 agreements were stolen for over $606 million. Among them, the Drift incident resulted in a loss of $285 million, and Kelp DAO suffered a loss of $292 million, with the two attacks accounting for approximately 95% of the total losses.

North Korean hackers had months of offline contact and infiltration with employees of Drift Protocol before launching one of the largest social engineering attacks in the history of the cryptocurrency industry, resulting in a loss of approximately $285 million.Data from blockchain security company TRM Labs shows that North Korean hackers have accounted for 76% of all cryptocurrency hacking losses in 2026 to date.

UPBIT will terminate trading support for Drift (DRIFT) on June 1, 2026, at 15:00. The affected trading pairs include DRIFT/KRW, DRIFT/BTC, and DRIFT/USDT. Users must complete withdrawals before July 1, 2026; otherwise, deposit and withdrawal requests for the related assets will not be processed.

Minh Don, the product lead of Drift, stated on its official Discord that it will take a few weeks to optimize the codebase, remove and add some small but impactful features, and plans to relaunch its forked exchange in May or June this year.Previously, Drift Protocol suffered losses exceeding $285 million in an attack incident.

According to Cointelegraph, since the $280 million attack on Drift Protocol on April 1, at least 12 DeFi protocols and cryptocurrency companies have been attacked in just over two weeks.Since early April, attacks on crypto protocols or companies include CoW Swap, Hyperbridge, Bybit, Dango, Silo Finance, BSC TMM, Aethir, MONA, Zerion, and the recent Rhea Finance and Grinex exchanges.Among them, the DeFi protocol Rhea Finance reported that the attackers "exploited a vulnerability in Rhea's margin trading feature to execute a coordinated liquidity pool manipulation attack," affecting the Rhea Lend smart contract. According to blockchain security company CertiK, the stolen funds amount to approximately $7.6 million.

According to Cointelegraph, stablecoin issuer Circle is facing a class-action lawsuit in the U.S. District Court for the District of Massachusetts for failing to freeze the stolen funds from the Drift Protocol during the attack incident.The plaintiffs claim that the attacker transferred approximately $230 million USDC from Solana to Ethereum within hours using Circle's Cross-Chain Transfer Protocol (CCTP), and Circle did not intervene. The lawsuit accuses Circle of complicity and incitement to misappropriation and negligence. Crypto analytics firm Elliptic previously suspected that the attack may be related to North Korean-backed hackers, and the related funds were subsequently exchanged for ETH and transferred via Tornado Cash.

Drift announced on its official website that the Drift Protocol has received support from Tether and other partners, with Tether planning to invest $127.5 million and other partners planning to invest $20 million to jointly support user recovery.The support plan includes a $100 million revenue-linked credit line, ecosystem grants, and loans provided to market makers. Drift will establish a dedicated user recovery pool aimed at gradually addressing the $295 million in unpaid user losses as trading revenue grows. Additionally, Drift will issue independent recovery tokens to affected users, which represent a claim on the recovery pool and are transferable. Drift is currently working on the protocol restart, having hired Ottersec and Asymmetric for auditing, and will migrate the settlement layer from USDC to USDT. The previous attack resulted in approximately $295 million worth of assets being stolen, while the insurance fund assets were unaffected.

Solana co-founder toly commented on the controversy surrounding Circle's USDC freezing mechanism, stating that we need a base layer stablecoin that can only be frozen under a court order. If there are other factors that can freeze it besides authorization from a judge approved by the U.S. Senate, then it is not a true dollar stablecoin.toly suggested that various protocols (such as Drift and Kamino) should issue wrapped stablecoins with their own freezing and unfreezing strategies on top of the base layer stablecoin, equipped with a security team truly responsible for handling hacking incidents, while having independent freezing and unfreezing strategies.It is reported that after the recent hacking of the Drift protocol, Circle did not promptly freeze the stolen USDC. Circle CEO Jeremy Allaire's remarks about the "moral dilemma" and freezing policy have sparked widespread discussion in the community regarding the freezing mechanisms of centralized stablecoins.

According to The Block, Circle CEO Jeremy Allaire stated that Circle will not freeze USDC wallets unrelated to legal proceedings.At a press conference in Seoul, South Korea, on Monday, Allaire responded to ongoing online criticism regarding whether the company should freeze USDC funds in light of hacking and vulnerability incidents. The controversy became more pronounced earlier this month when the decentralized finance protocol Drift suffered an attack of approximately $280 million, which is believed to be related to a six-month-long attack carried out through complex social engineering techniques, possibly involving a North Korean-affiliated hacking group.Prominent on-chain analysts, including on-chain investigator ZachXBT, publicly criticized Circle for not freezing approximately $230 million in USDC funds. These funds were reportedly transferred from Solana to Ethereum via Circle's cross-chain transfer protocol.

Circle Chief Strategy Officer Dante Disparte published a response regarding the over $270 million theft incident involving Drift Protocol. Disparte stated that Circle only freezes USDC when legally mandated to do so, and this is not a unilateral decision, nor is it a backdoor or algorithmic monitoring. This reflects the rule of law in internet-native financial activities.He pointed out that the core issue facing open systems is that the legal framework's response speed lags behind technological development. Protocols, wallets, exchanges, and stablecoin issuers should regard security and accountability as a shared obligation, and DeFi protocols can develop on-chain technical protection measures by referencing the circuit breaker mechanisms of traditional markets.He also called for the legislative processes of the U.S. GENIUS Act and CLARITY Act to incorporate due process, property rights, and financial privacy protection standards into law before the next major security incident occurs.