Drift Protocol was hit by a coordinated exploit on April 2, 2026 that used durable nonce accounts and social engineering to compromise its Security Council, leading to an estimated $280 million loss. The incident highlights a governance and operational security failure with broad DeFi implications.
On-chain investigator ZachXBT alleged Circle failed to stop millions in stolen USDC flowing through its native cross-chain bridge after the $285 million Drift Protocol exploit. The claim intensifies scrutiny on Circle's monitoring and intervention role for USDC.
Drift, a Solana-based DeFi derivatives platform, halted deposits on Apr 1, 2026 and is investigating suspicious activity, urging users to stop adding funds. The platform says it is probing the incident and advising caution while the review continues.
On-chain analysts estimate more than $200 million was drained from Drift Protocol wallets on April 1, 2026, marking one of the largest DeFi exploits this year. The attack underscores renewed security scrutiny for Solana-based platforms and margin trading protocols.