• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer
  • About TronWeekly
  • Write for us
  • Terms and Conditions
  • Privacy Policy
  • Disclaimer
  • Contact
  • All Posts
  • Advertise

TronWeekly

Crypto World News

  • Home
  • Latest News
  • Opinion
    • Education
    • Best TRON Wallets
    • Beginner’s guide to TRON
    • Tron Tokens
    • Market Analysis
  • Industry
    • Tron Exchange
    • Project Review
  • Press Release
  • Bitcoin (BTC)
  • Ripple (XRP)
  • Advertise
  • About TronWeekly
    • The Team
    • Editorial Policy
    • Write for us
    • Privacy Policy
    • Disclaimer
    • Terms and Conditions
    • Contact
You are here: Home / Cryptocurrency News / DeFi / Drift Protocol Hack: A Six-Month North Korean Intelligence Operation in 2026

Drift Protocol Hack: A Six-Month North Korean Intelligence Operation in 2026

What to know:

  • Drift Protocol, a decentralized derivatives trading platform, lost $280 million in a hack linked to a six-month intelligence operation by North Korean hackers.
  • The attackers gained trust by investing over $1 million in an Ecosystem Vault, compromising devices via malicious software and a VSCode/Cursor vulnerability.
  • The incident highlights the growing sophistication of cyberattacks in crypto, emphasizing the need for platforms to prioritize security and implement robust measures.

By Ananthyka J | Edited By Sahana Kiran,April 6, 2026, 8:00 PM

Drift Protocol Hack: A Six-Month North Korean Intelligence Operation in 2026

Drift Protocol is a decentralized derivatives trading platform. It has connected the last $280 million hack to a complex six-month intelligence operation by North Korean hackers who disguised themselves as a quantitative trading firm.

The Operation

The culprits known as UNC4736 or AppleJeus commenced the penetration of the Protocol in the fall of 2025. They met at the conferences of the industry and made relationships with the contributors. They invested more than $1 million of their own money in an Ecosystem Vault, gained trust, and finally, via malicious software and VSCode/Cursor vulnerability, they compromised the devices.

Drift Protocol
Source: Bankless Times

Also Read: Charles Schwab Move Sparks Institutional Crypto Adoption Surge

The Exploit

On April 1 2026, the criminals used pre-signed transactions to steal $280 million from the vaults of Drift Protocol. They created a fake token, CarbonVote, and tricked the oracles of Drift into considering it as real collateral through their exploitation. After that, the attackers transferred the stolen money to Ethereum. Blockchain analytics companies, Elliptic and TRM Labs, have linked this hacking to the North Korean government-backed hackers.

JUST IN 🚨: Investigation into the $285M Drift Protocol hack found that team members were approached at conferences by individuals linked to a North Korean operation. https://t.co/JkmqdEo9Cv

— Karan Singh Arora (@thisisksa) April 5, 2026

Also Read: KuCoin Secures Exclusive Spot in Nigeria’s Crypto Oversight Pilot, Signaling Regulatory Shift

Building a Safer Crypto Ecosystem

The hacking of Drift Protocol is an illustration of how cyberattacks in the cryptocurrency field are becoming more advanced and dangerous. Since blockchain technology is constantly developing, it is very important for the platforms to focus on security and introduce strong measures to ward off similar situations.

As the crypto landscape evolves, platforms must prioritize security to stay ahead of sophisticated threats. Implementing robust measures, such as multi-layered defenses and regular audits, can help prevent devastating exploits. By learning from incidents like this Protocol hack, the industry can strengthen its foundations and build trust among users. The future of crypto depends on it.

Also Read: Market Manipulation Crackdown: 10 Crypto Fraudsters Busted in Massive Scheme

Filed Under: DeFi, Cryptocurrency News

About Ananthyka J

Ananthyka J is a market reporter at Tronweekly, reporting on cryptocurrency news. She covers cryptocurrency markets, blockchain technology, and digital asset regulation, focusing on Bitcoin, Ethereum, DeFi, altcoins, and crypto policy. Her reporting emphasizes clear and accurate market coverage, including crypto market movements, regulatory developments, and blockchain adoption. She holds a BA in Journalism and Mass Communication and an MA in Communication and Media Studies. She has also completed multiple media internships, follows strict editorial and fact-checking standards, and discloses potential conflicts of interest when reporting.

🔗 Connect on LinkedIn

Twitter LinkedIn

Primary Sidebar

Recent Posts

  • TRON Tops 392M Accounts, Expanding Global Reach July 8, 2026
  • Ethereum Price Faces Hidden Bearish Divergence as Momentum Weakens July 8, 2026
  • BlackRock Resumes Bitcoin Buying After 2 Week Pause July 8, 2026
  • XRP Price Eyes Strong $1.10 Breakout After Ripple Kansas Dea July 8, 2026
  • Tokenized Stocks Unlock 24/7 Markets And Empower Investors July 8, 2026

Footer

News

  • Latest News
  • Altcoin News
  • Bitcoin (BTC)
  • Blockchain
  • Tron (TRX)
  • World

Digest

  • Meet the Founder
  • Price Winning Article
  • DeFi
  • Cyber Security
  • Crypto Scam

Industry

  • Project Review
  • Technology
  • Fintech
  • Tron Exchange
  • New in Town

Tron Universe

  • Event and Tron Parties
  • New in Town
  • Tron Tokens

FOLLOW US

  • Facebook
  • Telegram
  • Twitter
  • Linkedin

Subscribe US

Editorial Policy | Privacy Policy | Disclaimer | Terms and Conditions | Masthead

Copyright © 2026 · Tron Weekly. All Rights Reserved. NOTE: Tron Weekly is an independent crypto news site that adheres to the strict journalism policy anchored on transparency, trust, and objectivity, we have no affiliation with the TRON Foundation, its founder Justin Sun or any other cryptocurrency firm.