Skip to content
Drift Security Incident Expands, Affecting 20 Protocols with Major Financial Losses

Drift Security Incident Expands, Affecting 20 Protocols with Major Financial Losses

First seen 3 Apr 2026, 07:46 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 4, 2026 at 07:14 UTC
  • •The Drift security incident has impacted 20 protocols, with losses exceeding 10 million USD for Prime Numbers Fi.
  • •Affected protocols have suspended key functions to mitigate risks, with varying responses to the incident.
  • •The incident has led to increased trading volume for Jupiter, highlighting market reactions.

The Drift protocol vulnerability incident has significantly escalated, with the number of affected protocols rising from 11 to 20, according to SolanaFloor data. Notable newly impacted protocols include Prime Numbers Fi, Gauntlet, and PiggyBank, among others. Financial losses are substantial, with Prime Numbers Fi estimated to have lost over 10 million USD, and Gauntlet approximately 6.4 million USD. Other losses include Neutral Trade at 3.67 million USD and Elemental DeFi at 2.9 million USD. Most affected protocols have suspended key functions such as minting and withdrawals. Prime Numbers Fi is still evaluating its response, while Gauntlet is coordinating with Drift to mitigate further risks. The incident has prompted a notable increase in trading volume for Jupiter, indicating market reactions to the vulnerability. Drift has also communicated with the ETH wallet holding the stolen funds.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 190d ago How this analysis works

Timeline

2026-04-03
Drift security incident reported, affecting 20 protocols.
2026-04-03
Prime Numbers Fi estimated to have lost over 10 million USD.
2026-04-03
Affected protocols suspend minting and withdrawals.
2026-04-03
Drift communicates with ETH wallet holding stolen funds.

More articles in this cluster (3)

Following this threat?

Track Amp Pay in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed