Drift Protocol Launches Full Rebuild Following North Korean Hack

According to Drift’s official announcement, Drift Protocol released its latest recovery update on June 3, 2026. An independent forensic investigation by the cybersecurity firm Mandiant has confirmed that the previous attack on Drift was carried out by the North Korean threat actor UNC6862, whose tactics are highly consistent with historically state-sponsored North Korean cyber operations. On the rebuilding front, Drift has appointed Noah Prince, former engineering lead of the Helium protocol, as Protocol Lead to oversee codebase hardening and the reconstruction of the platform’s security architecture. Additionally, former members of the Gauntlet team have been hired to conduct audits of the clearing engine, optimize funding rates and market parameters, enhance clearing mechanisms, and implement ongoing risk monitoring. Drift plans to relaunch with a “security-first” approach, reestablishing itself as Solana’s largest USDT perpetual futures exchange. With support from strategic partners such as Tether, a dedicated recovery fund will be established, funded by platform revenues to compensate users for their losses. Further details regarding the recovery mechanism and timeline will be disclosed progressively.