1 April 2026
DPRK-linked operators spent months posing as a quantitative trading firm, built trust with contributors, and then used Solana's durable nonces to get Security Council members to pre-sign dormant transactions. Those transactions handed protocol admin to the attacker, who removed roughly $285–295m. No contract was broken; the people around the contracts were.
What recovery looks like
Drift published an incident report and a recovery plan built on tokens that represent verified losses, redeemable from a pool starting near $3.8m and intended to reach roughly $148–151m with up to $127.5m from Tether and $20m from other partners. Settlement moves to USDT and the relaunch was targeted at the second quarter of 2026, with rotated keys and a community multisig. Users are not yet whole.
The record before this
It is worth being fair about the earlier chapter: when Drift v1 was halted during the 2022 market stress, positions were settled and $19.5m of collateral was repaid in full. The team has done this once already, which is the strongest thing in its favour now. Before April 2026 the venue held the deepest perpetual liquidity on Solana with cross-margin across perps, spot and borrow.
Our position
We score the record, not the roadmap. Until the recovery pool pays out and the relaunched venue accumulates operating history, Drift sits last in this table and there is no case for depositing here.