The impact of the Drift Protocol exploit is still spreading across the Solana ecosystem. According to the latest data cited from SolanaFloor, the number of affected protocols has risen from 11 to 20, while estimated total losses have climbed to $285 million, making it one of the most severe security incidents on Solana in recent years.
Nine more protocols added to the affected list
The attack took place on April 1. The report said the attacker exploited weaknesses tied to the multisig mechanism and targeted multiple Drift liquidity pools. Because many Solana-based projects relied on Drift liquidity or integrated its strategies, including delta-neutral approaches, the breach quickly produced a wider contagion effect.
The nine newly listed protocols are PiggyBank, Perena, Vectis, Valeo, Amp Pay, Loopscale, Prime Numbers Fi, Gauntlet, and Exponent. The jump in affected projects shows that the incident has continued to ripple through interconnected DeFi products rather than remaining isolated to one platform.
Prime Numbers Fi records the largest disclosed loss
Among the losses disclosed so far, Prime Numbers Fi appears to be the hardest hit, with more than $10 million in estimated losses. Gauntlet lost about $6.4 million, while Neutral Trade and Elemental DeFi lost around $3.67 million and $2.9 million respectively.
Reflect Money, Vectis, Ranger Finance, and Pyra also reported notable damage, with losses ranging from roughly $551,000 to $1.95 million. As more details emerge, the market is still piecing together the full scale of the exposure across connected protocols.
Drift halts deposits and withdrawals
In response, the Drift team has suspended deposit and withdrawal functions and is working with security firms to trace the hacker's fund flows. One of the affected projects, PiggyBank, confirmed a loss of $106,000 and moved to fully reimburse impacted users using team funds.
The report also said the incident has put selling pressure on the DRIFT token and weighed on short-term liquidity across the Solana ecosystem. Risks tied to multisig management, access control, and cross-protocol integration have come back into focus as the fallout continues.