The security incident involving Solana decentralized perpetual contract platform Drift Protocol continues to expand. According to SolanaFloor’s latest data, the affected protocols have increased to 20, with total losses reaching as much as $285 million, making it one of the most severe security incidents in the Solana ecosystem in recent years.
(Background recap: Drift Protocol has confirmed that the hack wasn’t some April Fools’ Day prank! Losses could be as high as $270 million, and the hackers are furiously laundering money to swap for ETH)
(Additional background: Elliptic report: The “$280 million Drift Protocol theft” suspect is believed to be North Korean hackers! Their cross-chain laundering methods are too professional)
Table of contents
Toggle
Renowned decentralized finance (DeFi) perpetual contract platform Drift Protocol suffered a major security vulnerability attack on April 1. The impact of this storm is rapidly spreading. According to SolanaFloor’s latest data, as of the time of publication, the number of related protocols affected by the hacker attack has risen from 11 to 20, and total losses are estimated at as much as $285 million, making it one of the worst hacking incidents in the Solana ecosystem in recent years.
🚨New: @DriftProtocol exposure tracker updated with more Solana projects confirming impact from the $285M exploit. pic.twitter.com/DFhttYeadF
— SolanaFloor (@SolanaFloor) April 2, 2026
This hacker attack mainly targeted multiple Drift funds using issues such as vulnerabilities within a multisig mechanism. Because many projects in the Solana ecosystem rely on Drift’s liquidity or integrate its strategies (such as delta-neutral strategies), the attack triggered a domino effect shortly after it occurred. The latest nine protocols added to the disaster zone list include: PiggyBank, Perena, Vectis, Valeo, Amp Pay, Loopscale, Prime Numbers Fi, Gauntlet, and Exponent.
In terms of specific loss amounts, the hacks affecting each impacted protocol have gradually come to light. The latest statistics show that the estimated worst losses are for Prime Numbers Fi, at more than $10 million; major institution Gauntlet lost about $6.4 million; Neutral Trade and Elemental DeFi each lost about $3.67 million and $2.9 million, respectively. In addition, projects such as Reflect Money, Vectis, Ranger Finance, and Pyra are also facing massive losses ranging from $0.551 million to $1.95 million.
In the face of this sudden systemic risk, the Drift team has quickly paused deposit and withdrawal functions and is actively cooperating with a cybersecurity firm to track the hackers’ fund flows. Notably, some impacted protocols have also demonstrated crisis response capabilities—for example, after confirming a loss of $106,000, PiggyBank promptly deployed team funds to fully reimburse the affected users.
This incident not only put heavy selling pressure on Drift’s native token DRIFT, but also weighed on Solana’s overall short-term liquidity. This painful lesson totaling $285 million once again highlights the potential risks in DeFi ecosystems involving multisig management, permission controls, and cross-protocol integration. Whether the funds can be successfully recovered afterward, and what compensation plans will be offered by other impacted protocols, are still being closely watched by the market.