Skip to content
Drift Protocol Suffers Major $270M Exploit Amid Ongoing Investigation

Drift Protocol Suffers Major $270M Exploit Amid Ongoing Investigation

First seen 1 Apr 2026, 21:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 2, 2026 at 21:32 UTC
  • •Drift Protocol lost an estimated $270M to $285M due to an active attack on April 1, 2026.
  • •The exploit may involve compromised admin access and price manipulation techniques.
  • •The DRIFT token's value dropped by approximately 35% following the incident.

On April 1, 2026, Drift Protocol, a decentralized exchange on the Solana blockchain, confirmed it was under an active attack, resulting in an estimated loss of $270 million to $285 million. The exploit involved suspicious transfers to a wallet identified as HkGz4K, with the protocol suspending all deposits and withdrawals immediately. Initial reports indicated that the attack may have exploited compromised administrative access or manipulated token prices. Analysts noted that the incident could be one of the largest DeFi hacks of the year, with the DRIFT token plummeting approximately 35% in value. The protocol's total value locked (TVL) significantly decreased from around $311 million to approximately $23 million following the incident. As investigations continue, there are concerns about the security of decentralized exchanges and potential regulatory repercussions. No confirmed recovery of funds has been reported as of April 2, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 196d ago How this analysis works

Timeline

2026-04-01
Drift Protocol confirms active attack and suspends operations.
2026-04-01
Initial loss estimates range from $200M to $285M.
2026-04-01
DRIFT token value drops by 35% after exploit reports.
2026-04-01
Investigation into the exploit begins with multiple security firms.
2026-04-02
Drift Protocol's TVL reported to have fallen to approximately $23 million.

More articles in this cluster (123)

Following this threat?

Track Circle in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed