Someone Just Stole $200 Million From a Crypto Exchange
What's going on here?
On April 1st, at least $200 million, some estimates say $285 million, was drained from Drift Protocol, a decentralised exchange built on Solana. The attacker didn't exploit a code bug. They got hold of the admin's private key, essentially the master password, and walked straight through the front door. USDC, wrapped Bitcoin, wrapped Ethereum, all gone, bridged off Solana to Ethereum within hours.
What does this mean?
This is the largest hack Solana's DeFi ecosystem has ever seen, second only to the $326 million Wormhole bridge exploit in 2022. Drift's governance token crashed 28% on the day, and now sits 98% below its all-time high. Trading volume across Solana's derivatives market dropped 30% in 24 hours as users panicked.
Circle, which issues USDC, watched hundreds of millions in stolen funds transit its own bridge for six hours, and did nothing.
Why should you care?
Speed is Solana's biggest selling point. But speed without security is just a faster way to lose money.
When a platform as large as Drift can be emptied through one compromised key, it raises a real question: how many other protocols are one bad password away from the same fate?
If you have assets on any DeFi platform right now, it's worth asking whether the protocol has been independently audited. The hack didn't break Solana, but it reminded everyone that DeFi's biggest risk isn't volatility. It's trust.