Drift Protocol hack on 2026-04-01 ($295M reported)
Hack on Solana, 1 Apr 2026. Reported loss $295M. Last verified 4 Nov 2026.
critical
Reported loss
$295M
as reported by the sources
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Solana
Summary
Drift Protocol on Solana was exploited on 2026-04-01, leaving about $295 million in outstanding user losses according to Drift. Drift said a Mandiant forensic review attributed the attack to UNC6862, a North Korean threat group, and it set up a recovery pool supported by Tether and other partners.
- Protocol
- Drift Protocol
- Type
- Hack
- Reported loss
- $295,000,000 · as stated: $295 million in outstanding user losses source: drift.trade ↗
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | April 1 | drift.trade ↗ |
| Loss (USD) | $295 million in outstanding user losses | drift.trade ↗ |
| Attribution | UNC6862, a North Korean threat group | drift.trade ↗ |
Primary sources
- Drift: incident recovery update ↗ official announcement · accessed 2026-11-04
- Drift: recovery update with Mandiant attribution ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram