2026-04-01 · 2026-Q2
Drift Protocol $285M Exploit
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Not applicable
Target
Drift Protocol (Solana DeFi)
Impact
$285M stolen in 12 minutes via fictitious CarbonVote Token, oracle manipulation, and zero-timelock Security Council migration
Root cause
Six-month social engineering campaign by UNC4736 (DPRK) targeting multisig signers; pre-signed hidden authorizations
Sources
Catalog
Cite this: AgentProv incident record: Drift Protocol $285M Exploit (2026-04-01). https://agentprov.com/incidents/2026-04-01-drift-protocol-285m-exploit