The Drift Protocol security breach has grown far beyond an isolated exchange incident. Latest exposure data from SolanaFloor shows the exploit has now affected 20 Solana projects, up sharply from the 11 cases reported earlier in the week. Elliptic and Bloomberg estimate total losses at about $285 million, placing the event among the larger crypto thefts recorded in 2026.
Prime Numbers Fi and Gauntlet report major exposure
Among the newly identified victims, Prime Numbers Fi has disclosed the largest individual hit, with losses of more than $10 million. Risk management platform Gauntlet also confirmed $6.4 million in exposure. Other disclosed loss figures include $3.67 million, $2.9 million, $1.95 million, $1.69 million, $919,000, and $551,000.
Some teams moved quickly after the breach. PiggyBank said it lost about $106,000, but added that the team had already covered the full amount so users would not bear the loss.
Composability turned one breach into a wider shock
The spread of the exploit reflects how tightly connected Solana DeFi applications are. A number of projects use Drift vaults to generate yield or supply liquidity for trading activity. Once the central venue was compromised, linked protocols were exposed through that same integration layer.
Since the attack began on April 1, many teams have shifted into defensive mode. Minting, redeeming, and withdrawals have been paused across dozens of platforms. Drift has suspended its own operations while the investigation continues. Reports also indicate that stolen funds are being moved through bridges to the Ethereum network, making tracking more difficult.
DRIFT token fell more than 20%
The market reaction was immediate. DRIFT dropped by more than 20% after news of the exploit emerged, and on April 2 the token touched a record low of $0.03885. The price move shows how quickly confidence can disappear once a protocol’s security is called into question.
The incident has also exposed a broader weakness in Solana DeFi. Shared liquidity and integrated infrastructure can support growth, but they also increase the damage when one key platform fails. For affected teams, the near-term focus is now on recovery plans, treasury disclosures, and user fund protection.