🚨 @DriftProtocol was hit by a major exploit on April 1, with ~$270–285M drained from vaults within ~1 hour via suspicious transactions. Initial findings suggest the attacker leveraged pre-signed durable nonce transactions combined with possible social engineering (rather than a typical smart contract bug), moving funds across chains to Ethereum to obfuscate flows. Drift has paused deposits/withdrawals, confirmed an active attack, and is working with security partners and exchanges to contain damage while investigations continue — users are advised to revoke approvals and stay alert as the situation develops.