Drift Protocol Suffers $280-285 Million Exploit on Solana

Drift Protocol, a Solana-based perpetuals DEX with $550 million in total value locked, suffered a major exploit on April 1, 2026 that drained between $280-285 million through unauthorized transactions. The attack began around 11:06 a.m. ET when approximately 41 million JLP tokens worth $155 million were transferred from Drift vaults to an attacker address beginning with HkGz4K. Security experts including PeckShield founder Jiang Xuxian concluded the exploit resulted from compromised admin keys rather than a technical vulnerability, representing human error that allowed the attacker privileged access to vault functionality. Drift Protocol suspended deposits and withdrawals while coordinating with security firms, bridges, and exchanges, as the native DRIFT token plummeted 28% to around $0.049, down 98% from its November 2024 all-time high of $2.60.

Details and Timeline of the Exploit

• ▪Total transfers from Drift Protocol to the attacker's address add up to more than $250 million according to Arkham Intelligence
• ▪The first transfer from Drift Protocol took place around 11:06 a.m. on April 1, 2026, when roughly 41 million JLP tokens valued at $155 million were transferred from the Drift Vault to address HkGz4K
• ▪Some estimates suggest $285 million was stolen from Drift Protocol
• ▪Drift Protocol experienced an exploit that impacted more than $200 million in funds on Solana
• ▪The attacker's address received a small transfer valued at around $2.52 from the Drift Vault prior to Wednesday's exploit
• ▪Drift Protocol posted about the active attack on X around 3:00 p.m. ET on Wednesday, April 1, 2026

Impact on Drift Protocol and Solana Ecosystem

• ▪Drift Protocol's native token DRIFT is down nearly 28% on the day of the exploit
• ▪Drift Protocol had $550 million in total value locked according to DefiLlama
• ▪DRIFT token has fallen more than 98% from its November 2024 all-time high of $2.60
• ▪DRIFT token was recently changing hands around $0.049 following the exploit

Perspective of Drift Protocol users and vault depositors

• ▪Users who held funds in Drift Protocol vaults suffered losses from an exploit that impacted more than $200 million in funds, with some estimates suggesting $285 million was stolen

Perspective of DRIFT token holders

• ▪DRIFT token holders lost approximately 28% of their investment value within a single day due to the exploit
• ▪The Drift Protocol exploit accelerated the decline of DRIFT token from its November 2024 peak of $2.60