Incident All ledgers
Drift Trade: $295.0m
Drift Trade lost $295.0m on 1 April 2026. Ranked 14th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 1 April 2026
- Lost
- $295.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Access Control
- Method
- Proxy Upgrade Hijack
- Chains
- Solana
Attackers seized admin control of Solana-based Drift Protocol on April 1, 2026 by getting Security Council members to pre-sign durable-nonce transactions, then used a fake collateral token to drain about $295M. Security firms linked it to DPRK/Lazarus Group.
Against the ledger
- It ranks 14th of the 1,272 incidents with a known loss, and 4th in 2026.
- It accounts for 45.5% of the $648.1m in known losses in April 2026.
- 225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 15.0% of that.
- The ledger records no returned funds.
Other incidents named Drift
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 11 May 2022 | Drift Trade | $14.5m | DeFi Protocol | Risk Parameter Abuse | $14.5m |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 10 Aug 2021 | Poly Network | $611.0m | DeFi Protocol | Improper Access Control | — |
| 12 Feb 2018 | BitGrail | $170.0m | CEX | Improper Access Control | — |
| 09 Nov 2017 | Parity Multisig | $150.0m | DeFi Protocol | Uninitialized Proxy | — |
| 08 Oct 2021 | Mirror | $90.0m | DeFi Protocol | Improper Access Control | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
All failures in 2026 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Drift Trade, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/drift-trade-2026-04-01/. How this is built