The Drift Protocol, a major perpetual futures exchange on Solana, was hit by a massive exploit on April 1, 2026. The team first warned users on X about unusual activity, then confirmed an active attack, suspending deposits and withdrawals and stressing the incident was not an April Fools joke. According to security firm PeckShield, the total loss reached $285 million, making it one of the largest DeFi hacks on Solana.
Funds Draining from Vaults
The first major transfer occurred around 11:06 a.m. ET, when roughly 41 million JLP tokens, worth about $155 million, moved from a DEX vault to the HkGz4K address. Subsequent transfers of various assets pushed the total above $250 million. The suspicious address had been funded with only 1 SOL the week before and may have received a small test transfer earlier. Security researchers believe the attack stemmed from leaked or compromised admin keys, pointing to an access-control failure rather than a simple code bug.
Market Impact: DRIFT Hits New Lows
The token plummeted nearly 28% on the day to around $0.049. CoinMarketCap data shows DRIFT touched an all-time low of $0.03813 on April 2, down more than 98% from its November 2024 high of $2.60. At press time, the token trades near $0.04239. Some users saw warnings when trying to access the protocol via its wallet, and DeFi Development Corp stated it had zero direct or indirect exposure to the ecosystem.
Key Lesson: Private Key Security Remains Critical
This exploit highlights the risk of admin-gate vulnerabilities in DeFi. Multiple audits from 2023 and 2024 were listed on Drift's website, but auditing cannot protect against private key loss. Crypto theft exceeded $3.4 billion in 2025, with the Bybit breach alone accounting for $1.5 billion. The Solana community is now expected to push for stronger multi-signature requirements and decentralized governance to prevent a single point of failure from causing such massive financial damage.