$270 Million Drain from Drift Protocol Exploits Solana Feature
- An attacker exploited ‘durable nonces’ on Solana to drain at least $270 million from Drift Protocol.
- The attack involved obtaining two signatures from the Security Council multisig, which governs Drift’s operations.
- Stolen assets included $155.6 million in JPL tokens and $60.4 million in USDC, among others.
- The primary wallet used for draining was funded eight days prior to the attack via NEAR Protocol intents.
- Over $230 million in USDC was bridged to Ethereum shortly after the attack using Circle’s CCTP.
This incident highlights vulnerabilities in operational security within DeFi protocols, where social engineering can lead to significant financial losses without exploiting code vulnerabilities.
The use of durable nonces allowed the attacker to execute a pre-planned transaction that drained funds within minutes after weeks of preparation, emphasizing a critical gap in multisig approval processes. (Source)
