‘Six Months in the Making’: Drift Protocol Says $285,000,000+ Hack Involves North Korea-Backed Scammers at Major Crypto Summits


The recent $285 million hack of the Solana-based DeFi platform Drift Protocol didn’t turn up any luck.

Drift program he says in the new situation that a The attack of April 1 it was the result of six months of careful manipulation from North Korean-backed traitors.

“In the year 2025 or at the end of the year 2025, the service providers of Drift were approached by a group of people at a major crypto conference who showed it as a trading company looking to be in line with the plan. Now it is understood that this seems to be a direct approach, where the people of the group continued to deliberately seek and participate deliberately in Drift, individually, during the six months of the major companies of the conference.

He was technically proficient, had a proven track record, and knew exactly how Drift worked. The Telegram group was formed at the first meeting, and what followed were months of discussions about business strategies and possible mergers. This is similar to how the retail industry works with Drift. “

The cheaters climbed into the Ecosystem Vault on Drift in December and January, interacting with many people who contributed to several working sessions and invested more than $1 million.

“Merger negotiations continued in February and March 2026. Various Drift agents also met with people from the group, face-to-face, at several major company meetings. By this time, the relationship had been going on for about half a year. These were not strangers; they were people Drift had worked with and met face-to-face.

For all of these reasons, links were shared on projects, tools, and software they claimed to be building, which were the practices of commercial companies. “

Drift Protocol said an investigation concluded with “moderate confidence” that the attack was planned by the same terrorist group that is affiliated with North Korea. he cut DeFi platform Radiant Capital in 2024.

The report shows that none of the people involved in the attack were North Korean citizens.

“DPRK terrorists who operate at this level are known to send third-party proxies to establish face-to-face relations…

This research has shown that the profiles used in this third group created a common identity including work profiles, public profile profiles and professional networks. The people that Drift has met in person seem to have spent months building a reputation, both personal and professional, that can withstand business or peer review. “

Follow us X, Facebook and Telegram

Don’t Miss Out – Sign up to receive email notifications straight to your inbox

Swimming Daily Hodl Mix

&nbsp

Disclaimer: The views expressed in Daily Hodl are not financial advice. Investors should do their due diligence before making any risky investments in Bitcoin, cryptocurrency or digital assets. Please note that your transfers and transactions are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend buying or selling any assets including cryptocurrencies, nor is The Daily Hodl a financial advisor. Please note that The Daily Hodl participates in affiliate marketing.

Image Created: Midjourney



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *