Solana DEX Drift Protocol Hit by $250M Exploit as Security Breach Triggers Platform Shutdown

A major security breach has struck Drift Protocol, with attackers siphoning off more than $250 million in crypto assets, according to on-chain data and blockchain analytics reports.

The Solana-based decentralized exchange, widely used for perpetual futures trading, halted all deposits and withdrawals shortly after detecting the incident. In a public statement, the team confirmed the exploit was ongoing and emphasized that emergency measures were being taken in coordination with security partners, exchanges, and cross-chain bridges.

Suspicious activity first surfaced when large transfers began moving from Drift’s vaults to a wallet address starting with “HkGz4K.” The earliest major transaction involved roughly 41 million JLP tokens—valued at approximately $155 million—before additional assets were rapidly drained and dispersed across multiple wallets.

Data from Arkham Intelligence suggests the total outflow exceeded $250 million, while estimates from PeckShield indicate losses could be closer to $285 million.

Early analysis points to a potential private key exposure rather than a flaw in the protocol’s codebase. Security experts believe the attacker may have gained privileged administrative access, allowing them to manipulate vault operations—a scenario more consistent with operational or human error than a smart contract vulnerability.

The compromised wallet itself had minimal activity prior to the exploit, initially funded with just 1 SOL days earlier. However, subtle interactions with Drift’s vault—such as a small test transfer—may indicate the attacker had access well before the large-scale theft unfolded.

At the time of the breach, Drift Protocol held approximately $550 million in total value locked, according to DeFi data trackers. Despite its deep integrations across the Solana ecosystem, several affiliated firms reported no direct impact on their treasuries.

Meanwhile, ecosystem participants moved quickly to mitigate further risk. Wallet provider Phantom issued warnings to users attempting to interact with the platform, urging caution as investigations continue.

The fallout was immediate in the market. Drift’s native token, DRIFT, plunged nearly 28% within hours of the incident, extending its long-term decline from its 2024 peak.

As the situation develops, the breach adds to growing concerns around operational security in decentralized finance—highlighting how even non-technical vulnerabilities can lead to catastrophic losses in an increasingly interconnected crypto landscape.