Drift Protocol Loses $280M in Admin Takeover via Durable Nonce Exploit
A coordinated attack targeted Drift’s Security Council on April 2, 2026, using durable nonce accounts together with social engineering to seize admin privileges and withdraw roughly $280 million in protocol funds. Attackers leveraged the durable nonce mechanism to bypass normal transaction safeguards while manipulating access controls tied to governance keys. The compromise allowed rapid ORT-like transfers that drained liquidity across affected vaults and positions.
The breach underscores the intersection of on-chain primitives and off-chain operational risk: durable nonce workflows and weak human processes created a fragile attack surface. For users and counterparties this raises immediate concerns about asset recoverability and market disruption on Solana-based derivatives platforms. Investigations are reportedly underway; the incident will likely prompt audits, emergency multisig hardening, and renewed scrutiny of governance procedures across DeFi projects.