Solana's Drift Protocol Exploited for Over $200 Million

• The Solana-based Drift Protocol was hit by a massive exploit, resulting in estimated losses between $200 million and $270 million.
• Multiple high-value vaults were targeted, including the JLP Delta Neutral and Super Staking vaults for SOL and BTC.
• The price of the DRIFT token fell by nearly 5% as the attacker began bridging stolen funds to Ethereum to purchase ETH.

Details of the Exploit and Assets Stolen

Drift Protocol, a prominent decentralized trading platform on the Solana network, has confirmed a security breach that has drained significant liquidity from its ecosystem. On-chain data indicates that the exploit initially resulted in $200 million in losses, though further analysis suggests the total could be as high as $270 million. The attacker specifically targeted several of the platform's vaults, extracting a wide range of assets.

According to SolScan, the most significant single loss involved 41.7 million JLP tokens, valued at roughly $155 million. Other assets removed from the protocol include:

• SOL
• USDC
• cbBTC
• wBTC

Attacker Tactics and Movement of Funds

The exploit began targeting the protocol's infrastructure several hours ago. Investigation into the primary exploiter address, which begins with HkGz4Kmo, reveals it was created eight days ago and showed minimal activity until 18 hours before the attack. After draining the vaults, the hacker utilized the Jupiter DEX aggregator to swap assets into USDC.

These stablecoins were then bridged to the Ethereum blockchain to acquire ETH. By 17:45 UTC, the attacker was confirmed to hold 19,913 ETH, which has a current market value of approximately $42 million. While the primary vault draining appears to have concluded, the attacker remains active in moving and obscuring the stolen capital.

Market Impact and Official Response

In response to the incident, Drift Protocol issued a warning on social media, describing the activity as unusual and urging users to stop all deposits immediately. The team explicitly clarified that the announcement was "not an April Fools joke" to ensure the community took the threat seriously. The protocol, which had a Total Value Locked (TVL) of over $550 million prior to the attack, is a central hub for perpetuals trading on Solana.

The market reacted quickly to the news, with the DRIFT token dropping nearly 5% to a price of $0.064. Drift representatives stated they are currently investigating the root cause and will provide updates as more information becomes available.