The Solana-based Drift <button class="define-target" id="defi">defi</button> <button class="define-target" id="perps">perpetual futures</button> exchange was exploited for $285&nbsp;million. The project alerted the community on social media, writing: "Drift Protocol is experiencing an active attack. ... This is not an April Fools joke."<p>The project later described the exploit as "a novel attack involving durable nonces, resulting in a rapid takeover of Drift's Security Council administrative powers." Once the attacker had access to admin capabilities, they quickly eliminated risk management limits on the protocol and drained huge quantities of tokens, which they swapped to USDC and then ETH. The attack was attributed to extremely sophisticated social engineering, likely by North Korean hackers.</p><p>Some have criticized USDC's issuer, Circle, for not <button class="define-target" id="freezing">freezing</button> the stolen funds during the six hours they were held in USDC. Unlike ETH, USDC is controlled by a centralized company that can, and regularly does, freeze assets determined to have been stolen or connected to illicit activity.</p><p>The theft is among the largest in defi history.</p>

"Drift says $280M exploit tied to 'sophisticated' admin takeover; ZachXBT criticizes Circle over USDC handling"