EarlyNarratives
Pricing
Start free trialSign in
Start free trialSign in
Signal

DeFi: 285 Million Drift Protocol hack revealed as state-backed intelligence operation

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-04-05 05:41 UTCUpdated 2026-04-05 21:41 UTC
redditrss
crypto_assetsdefihacks_that_impact_crypto
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
BackEvidence (3)Get the free brief by emailStart free trial
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
View all evidence
Overview

What initially appeared as a routine DeFi exploit draining $285 million from Drift Protocol was uncovered as a sophisticated, six-month-long intelligence operation likely backed by North Korean state-affiliated hackers.

Entities
Drift ProtocolSolana Founder
Score total
1.51
Momentum 24h
3
Posts
3
Origins
3
Source types
2
Duplicate ratio
0%
Why now
  • The attack was uncovered recently, revealing months of covert operations starting in Fall 2025.
  • Drift Protocol's response and ongoing investigations are actively shaping industry security practices.
  • Legal commentary on potential civil negligence is emerging, influencing future compliance standards.
Why it matters
  • Demonstrates the evolving threat landscape with state-backed actors targeting DeFi.
  • Highlights vulnerabilities in social engineering and software supply chains within crypto projects.
  • Raises legal and regulatory questions about protocol security and operator responsibility.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • The $285 million Drift Protocol hack was a state-backed intelligence operation involving North Korean-affiliated hackers.
How sources frame it
  • Crypto Attorney: neutral
This incident highlights the increasing sophistication of state-backed attacks on DeFi protocols, emphasizing the need for enhanced security and due diligence.
All evidence
All evidence
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
  • Cointelegraph (1)
  • U.Today (1)
  • CryptoCurrency (1)
Top origin domains (this list)
  • cointelegraph.com (1)
  • u.today (1)
  • reddit.com (1)