2026-04-01 · 2026-Q2
Drift Protocol $285M Exploit
Outside the model: Adjacent ecosystem Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- No, architectural
- Vendor response:
- Unknown
- In the wild:
- Yes
Target
Drift Protocol (Solana DeFi)
Impact
$285M stolen in 12 minutes via fictitious CarbonVote Token, oracle manipulation, and zero-timelock Security Council migration
Root Cause
Six-month social engineering campaign by UNC4736 (DPRK) targeting multisig signers; pre-signed hidden authorizations