Drift Protocol has revealed that its April 1, 2026 hack was the result of a highly coordinated operation that took months to execute.
The attack was not random but instead it was planned, involving individuals who posed as a legitimate trading firm. Over time, they built trust with Drift contributors through meetings, conversations, and active participation in the ecosystem.
According to the update, the attackers first approached team members around late 2025 at major crypto conferences.
They maintained contact for months, engaging in technical discussions, sharing project ideas, and even depositing over $1 million to appear credible. By early 2026, they had fully integrated themselves into Drift’s ecosystem and gained the confidence of multiple contributors.
Also Read: Drift Protocol Suffers From $286 Million Breach, Triggers Market Shock
When the exploit finally occurred, investigators traced the breach back to these interactions. The attackers had already erased their communication channels and malicious tools, making immediate detection more difficult.
Drift Protocol Report on the Attack
Drift shared thier believes that the breach may have occurred through multiple entry points and they believe that one of the contributor may have been compromised after downloading a code that was shared by the attackers, while another may have installed a fake wallet app presented during collaboration.
The platform also shared that so far, there has been indications that a known vulnerability in developer tools may have played a role in helping the scammers. This flaw could allow harmful code to run just by opening a file, without any warning or user action needed.
Source: Drift Protocol
The platform has since frozen its remaining functions, removed compromised wallets, and flagged attacker addresses across exchanges and bridge services. A cybersecurity firm has been brought in to support the investigation, which is still ongoing.
Early findings suggest the operation may be linked to a group previously associated with a major crypto hack in 2024. However, full confirmation will depend on deeper forensic analysis.
Drift Protocol says the attackers used convincing identitiesas well as professional backgrounds to carry out the hack , showing how advanced and organized such threats have become. The team has urged other projects to strengthen thier internal security, review their access control, and treat all external interactions with caution.
Also Read: Ethereum Price Trapped in Narrow Range: $1,900 Crash or Breakout?
