Drift suspends operations following major security incident

Drift, a decentralized finance (DeFi) platform—a sector of the crypto industry that uses blockchain-based smart contracts to offer financial services without traditional intermediaries—has suspended all deposits and withdrawals. The company confirmed it is “experiencing an active attack” and stated in a post on the social media platform X that it is working to “contain the incident” following the security breach. The decision to halt operations came directly from Drift following the security incident, with the platform confirming both the suspension of deposits and withdrawals and the active nature of the breach. A spokesperson for Drift did not immediately respond to a request for comment regarding the incident.

Security researchers and public blockchain data suggest that the losses from the exploit could be significant, though official figures have not yet been finalized. Blockchain security firm CertiK reported on X that hackers may have stolen around $136 million from the platform. Meanwhile, crypto analytics firm Arkham put the figure at around $285 million stolen. Both CertiK, a blockchain security firm providing loss estimates, and Arkham, a crypto analytics firm providing loss estimates, published their findings based on public blockchain data. The discrepancy between the two estimates highlights the complexity of tracking assets across public ledgers in real time during an active security incident.

If confirmed, the Drift hack could be the largest crypto theft of the year, according to the Rekt leaderboard, a site that tracks crypto thefts by size. The Rekt leaderboard, which serves as a leaderboard site tracking crypto thefts, notes that the scale of this incident could surpass all other exploits recorded so far this year. While the perpetrators of the attack have not been identified, security firms point to a broader pattern of high-value digital asset exploits. Security firms reported that North Korea was behind the most crypto thefts last year, netting at least $2 billion in stolen cryptocurrency. According to security firms, North Korea remains a primary state actor identified by security firms as a source of crypto thefts globally. These are funds the regime is believed to use to finance its nuclear weapons program and skirt international sanctions.

Why it matters

The incident highlights the persistent vulnerability of global DeFi platforms to large-scale exploits, with potential losses reaching hundreds of millions of dollars.