North Korean State-Backed Hackers Steal $270M from Drift Protocol After Six-Month Infiltration
On April 1, Drift Protocol disclosed a $270 million security breach that security researchers attribute to a North Korean state‑sponsored hacking group following an approximately six‑month infiltration campaign. The attackers gained persistent access to the protocol’s systems and executed a coordinated drain of funds across affected contracts, marking one of the largest single losses for a DeFi project this year.
The theft underscores persistent risks in decentralized finance—especially for cross‑chain bridges and protocols with complex permissioning—and raises urgent questions around tracking stolen assets, recovering user funds, and stemming potential sanctions evasion. Market participants and regulators will likely increase scrutiny on audits, key management, and on‑chain surveillance as Drift and affected counterparties assess remediation, potential insurance claims, and legal options.