drift

Theo thông tin từ ChainCatcher, nhà phân tích trên chuỗi PeckShield (@PeckShieldAlert) đã theo dõi, địa chỉ được đánh dấu là "Drift Exploiter" đã gửi 23,095.1 ETH (khoảng 44.4 triệu USD) vào Tornado Cash để trộn tiền, và cũng đã chuyển 0.85 ETH vào Bybit.

Tin tức từ ChainCatcher, theo dõi từ Onchain Lens, sau khi Drift Protocol bị tấn công 285 triệu USD trên Solana vào tháng 4, kẻ tấn công đã bắt đầu chuyển tiền qua Tornado Cash sau khi số tiền này bị giữ trong 3 tháng.Kẻ tấn công đang nhanh chóng gửi ETH vào Tornado Cash Router với mỗi lô 100 ETH, xảy ra nhiều giao dịch mỗi phút.

Tin tức từ ChainCatcher, theo thông báo chính thức, giao thức stablecoin Reflect được hỗ trợ bởi a16z đã công bố khởi động kế hoạch phục hồi tự nguyện độc lập cho những người nắm giữ vị thế USDC+ bị ảnh hưởng bởi sự kiện hack tháng 4 của Drift (hiện là Velocity): từ hôm nay mở cửa trong 180 ngày, những người nắm giữ có thể tự nguyện bán vị thế của mình cho Palindrome Engineering với giá 0.2 USDC + 80 Reflect Credit (RC) mỗi đơn vị, hoàn toàn thanh toán trên chuỗi.Kế hoạch này được Palindrome ứng trước vốn, hoàn toàn độc lập với tiến trình phục hồi của Drift. Tham gia có nghĩa là từ bỏ quyền truy đòi đối với Drift để đổi lấy tính thanh khoản xác định ngay lập tức; không tham gia vẫn có thể hỗ trợ kênh phục hồi DFX của Drift.

ChainCatcher tin tức, theo thông báo chính thức, nền tảng giao dịch hợp đồng vĩnh viễn Drift hôm nay đã công bố chính thức đổi tên thành Velocity, và cho biết việc nâng cấp thương hiệu lần này nhằm phản ánh kiến trúc nền tảng giao dịch thế hệ mới mà họ đang xây dựng.Đội ngũ chỉ ra rằng, trong thị trường hợp đồng vĩnh viễn, tốc độ thực hiện và đánh giá hướng đi là vô cùng quan trọng, tên gọi "Velocity" nhằm thể hiện tốc độ giao dịch và động lực thị trường, đồng thời đánh dấu nền tảng bước vào giai đoạn khởi động lại.Chính thức cho biết, việc đổi tên lần này cũng đại diện cho ranh giới rõ ràng trong lộ trình sản phẩm: nền tảng mới sẽ áp dụng kiến trúc hệ thống rõ ràng hơn, cơ sở hạ tầng an toàn hơn và định vị sản phẩm rõ ràng hơn. Hiện tại Velocity đang tiến hành công việc tái xây dựng, và dự kiến trong vài ngày tới sẽ mở phiên bản thử nghiệm riêng cho một số đối tác và nhà giao dịch, nhằm xác minh tính ổn định và hiệu suất của hệ thống giao dịch hợp đồng vĩnh viễn thế hệ mới dựa trên Solana.

Theo thông tin từ ChainCatcher, Pyra cho biết, sau khi đánh giá tất cả các phương án khả thi, công ty đã quyết định dần dần đóng cửa hoạt động. Chính thức cho biết, sự cố tấn công lỗ hổng Drift đã gây ảnh hưởng nghiêm trọng đến hoạt động và người dùng của họ, mặc dù trong vài tháng qua đã liên tục tìm kiếm con đường tiếp tục hoạt động, nhưng cuối cùng không tìm được phương án bền vững.

Drift Protocol stated that its current top priority is to restart the platform and restore revenue-generating capabilities to expedite the recovery process of user funds. After the platform restarts, it will become the largest USDT-based perpetual contract trading platform on Solana, and the related revenue will be used to support a specially established user compensation fund.Drift claims that substantial progress has been made in the restart efforts with strategic support from Tether and other partners. To enhance security, Drift announced the appointment of Noah Prince, the former head of engineering at Helium Protocol, as the protocol lead, responsible for protocol restructuring and security system upgrades.Meanwhile, former members of the Gauntlet team have also joined the restart efforts, providing risk management and treasury design support for the platform, including clearing engine reviews, funding rate optimization, market parameter adjustments, and ongoing risk monitoring. Additionally, Drift has hired the cybersecurity company Mandiant to conduct an independent forensic investigation of the attack incident.The investigation results indicate that this attack can be clearly attributed to the North Korean hacker group UNC6862, which is associated with multiple cyber attack operations. Drift stated that it will continue to prioritize security in advancing the platform restart and will announce the user compensation mechanism and specific timeline in the future.

Drift Protocol stated on platform X that after the protocol is restored online, users who have staked in the Insurance Fund will be able to withdraw their corresponding shares normally. The Insurance Fund is designed to maintain the protocol's solvency in the event of liquidation or bankruptcy. Since the protocol was paused before losses were completed through normal liquidation or bankruptcy processes, the Insurance Fund was not affected by the related vulnerabilities or attacks.Drift Protocol added that the assets of the protocol's own Insurance Fund will be used to support system restart and user recovery, and plans to publicly disclose the relevant on-chain addresses so that the community can track the use of funds and subsequent deployments.

The co-founder of the Solana ecosystem DeFi project Ranger Finance, cobra (@barrett_io), posted on the X platform that Ranger Finance is gradually shutting down. The project took on business beyond its sustainable capacity, and the founder invested personal funds to maintain operations, but delays in financing led to the accumulation of bills. Ultimately, the financing was unsuccessful, and the raised funds were returned.The team is trying to fairly pay employees and suppliers with the remaining two months of operating funds, but it is insufficient to cover all expenses. The treasury liquidation was unexpected and severely impacted budget decisions. Subsequently, the Drift attack incident depleted the remaining funds and personal capital. Treasury users affected by the Drift attack will receive recovery tokens when distributed by the Drift team. The founder stated that in hindsight, the project should have been shut down earlier and apologized for this.

According to CoinDesk, Drift Protocol has announced a user recovery plan for the approximately $295 million security breach on April 1, attributed to a North Korean-backed hacker group.The core of the recovery plan is to issue receipt tokens representing verified user losses, with each token representing $1 of verified loss, which holders can redeem based on the value of the recovery pool accumulated over time. The initial funding for the recovery pool is approximately $3.8 million, and it is expected to grow through exchange revenue of up to $127.5 million, Tether support, and up to $20 million from partners, until it covers the total loss of approximately $295.4 million.Drift has frozen about $3.36 million USDC and launched a public bounty to recover 10% of the assets. Drift plans to relaunch on a "security-first" exchange in the second quarter. Legal recovery efforts are still ongoing.

In less than three weeks, 12 agreements were stolen for over $606 million. Among them, the Drift incident resulted in a loss of $285 million, and Kelp DAO suffered a loss of $292 million, with the two attacks accounting for approximately 95% of the total losses.

North Korean hackers had months of offline contact and infiltration with employees of Drift Protocol before launching one of the largest social engineering attacks in the history of the cryptocurrency industry, resulting in a loss of approximately $285 million.Data from blockchain security company TRM Labs shows that North Korean hackers have accounted for 76% of all cryptocurrency hacking losses in 2026 to date.

UPBIT will terminate trading support for Drift (DRIFT) on June 1, 2026, at 15:00. The affected trading pairs include DRIFT/KRW, DRIFT/BTC, and DRIFT/USDT. Users must complete withdrawals before July 1, 2026; otherwise, deposit and withdrawal requests for the related assets will not be processed.

Minh Don, the product lead of Drift, stated on its official Discord that it will take a few weeks to optimize the codebase, remove and add some small but impactful features, and plans to relaunch its forked exchange in May or June this year.Previously, Drift Protocol suffered losses exceeding $285 million in an attack incident.

According to Cointelegraph, since the $280 million attack on Drift Protocol on April 1, at least 12 DeFi protocols and cryptocurrency companies have been attacked in just over two weeks.Since early April, attacks on crypto protocols or companies include CoW Swap, Hyperbridge, Bybit, Dango, Silo Finance, BSC TMM, Aethir, MONA, Zerion, and the recent Rhea Finance and Grinex exchanges.Among them, the DeFi protocol Rhea Finance reported that the attackers "exploited a vulnerability in Rhea's margin trading feature to execute a coordinated liquidity pool manipulation attack," affecting the Rhea Lend smart contract. According to blockchain security company CertiK, the stolen funds amount to approximately $7.6 million.

According to Cointelegraph, stablecoin issuer Circle is facing a class-action lawsuit in the U.S. District Court for the District of Massachusetts for failing to freeze the stolen funds from the Drift Protocol during the attack incident.The plaintiffs claim that the attacker transferred approximately $230 million USDC from Solana to Ethereum within hours using Circle's Cross-Chain Transfer Protocol (CCTP), and Circle did not intervene. The lawsuit accuses Circle of complicity and incitement to misappropriation and negligence. Crypto analytics firm Elliptic previously suspected that the attack may be related to North Korean-backed hackers, and the related funds were subsequently exchanged for ETH and transferred via Tornado Cash.

Drift announced on its official website that the Drift Protocol has received support from Tether and other partners, with Tether planning to invest $127.5 million and other partners planning to invest $20 million to jointly support user recovery.The support plan includes a $100 million revenue-linked credit line, ecosystem grants, and loans provided to market makers. Drift will establish a dedicated user recovery pool aimed at gradually addressing the $295 million in unpaid user losses as trading revenue grows. Additionally, Drift will issue independent recovery tokens to affected users, which represent a claim on the recovery pool and are transferable. Drift is currently working on the protocol restart, having hired Ottersec and Asymmetric for auditing, and will migrate the settlement layer from USDC to USDT. The previous attack resulted in approximately $295 million worth of assets being stolen, while the insurance fund assets were unaffected.

Solana co-founder toly commented on the controversy surrounding Circle's USDC freezing mechanism, stating that we need a base layer stablecoin that can only be frozen under a court order. If there are other factors that can freeze it besides authorization from a judge approved by the U.S. Senate, then it is not a true dollar stablecoin.toly suggested that various protocols (such as Drift and Kamino) should issue wrapped stablecoins with their own freezing and unfreezing strategies on top of the base layer stablecoin, equipped with a security team truly responsible for handling hacking incidents, while having independent freezing and unfreezing strategies.It is reported that after the recent hacking of the Drift protocol, Circle did not promptly freeze the stolen USDC. Circle CEO Jeremy Allaire's remarks about the "moral dilemma" and freezing policy have sparked widespread discussion in the community regarding the freezing mechanisms of centralized stablecoins.

According to The Block, Circle CEO Jeremy Allaire stated that Circle will not freeze USDC wallets unrelated to legal proceedings.At a press conference in Seoul, South Korea, on Monday, Allaire responded to ongoing online criticism regarding whether the company should freeze USDC funds in light of hacking and vulnerability incidents. The controversy became more pronounced earlier this month when the decentralized finance protocol Drift suffered an attack of approximately $280 million, which is believed to be related to a six-month-long attack carried out through complex social engineering techniques, possibly involving a North Korean-affiliated hacking group.Prominent on-chain analysts, including on-chain investigator ZachXBT, publicly criticized Circle for not freezing approximately $230 million in USDC funds. These funds were reportedly transferred from Solana to Ethereum via Circle's cross-chain transfer protocol.

Circle Chief Strategy Officer Dante Disparte published a response regarding the over $270 million theft incident involving Drift Protocol. Disparte stated that Circle only freezes USDC when legally mandated to do so, and this is not a unilateral decision, nor is it a backdoor or algorithmic monitoring. This reflects the rule of law in internet-native financial activities.He pointed out that the core issue facing open systems is that the legal framework's response speed lags behind technological development. Protocols, wallets, exchanges, and stablecoin issuers should regard security and accountability as a shared obligation, and DeFi protocols can develop on-chain technical protection measures by referencing the circuit breaker mechanisms of traditional markets.He also called for the legislative processes of the U.S. GENIUS Act and CLARITY Act to incorporate due process, property rights, and financial privacy protection standards into law before the next major security incident occurs.