Drift Protocol hack
April 1, Drift Protocol confirmed $280M exploit via durable nonces and multisig compromise. Attack began March 23, impacting 20+ Solana protocols.

Risk cannot be destroyed, only transferred. @nntaleb spent a career proving that structured finance does not eliminate tail exposure. It relocates it to whoever priced the ‘junior tranche’ wrong and called it diversification in @0xngmi ‘s framework. Cross-protocol tranching’s 80% senior loss reduction assumes protocol failures are statistically independent. They are not. In 2022 Aave, Compound, and Celsius all felt the same stETH depeg through shared collateral and shared oracle feeds. No tranche structure would have saved anyone that day. In the tails, correlations converge to 1. Shared oracles, shared liquidity venues, shared macro shock, shared depositor panic. The diversification benefit of spreading across protocols is a gaussian intuition applied to a fat-tailed world. Lazarus Group and friends are doing a ‘good job’ making those tails fatter too. The math works in normal conditions and fails catastrophically in the only conditions that actually matter. The honest alternative is not a smarter structure. It is just using the best and watching them closely. Just use @aave. Just use @HyperliquidX portfolio margins. Just use @D2_finance. Just use @DefiLlama AI at 50 bucks! ( that’s cheap tail protection!)

so many takes on drift situation while, again, the most likely outcome is it being an inside job with a elaborate story and involvement of 3rd party actors "to help find the bad guys" for plausible deniability - irrelevant protocol with way too much TVL (sus) - always intended to be extractive VC slow rug anyways - even have meme token asian woman CEO, she probably doesnt even know what a solana or a perp even is - likely been money laundering chinese funds all this time - zero prospects for the future, no one really cares - wind it down and let the dirty money disappear - ?????? the answer is always the same. unless its the largest protocol in its niche, its not worth having significant money in it that you cant afford to lose occams razor says drift have hacked themselves and its all a elaborate ruse, DPRK as the perfect boogeyman cos they obviously cant be held responsible or even comment on the issue i estimate the amount of "hacks" in the space being simple inside jobs at around 50%

This is a very tough read for me. I have spent years trying to help the victims of the Sundae Swap fraud lawsuit, where they received Sundae tokens as part of a legal settlement. Victims lost tens of millions of dollars. By the time they got the Sundae tokens they were entitled to, they were worthless. (From team/VC dumping) I can appreciate that since the lawsuit, Pi has made meaningful contributions with his Sundae Labs team, albeit with generous financial support from the Cardano treasury and affiliated third parties. I'm fairly certain the bad behavior wasn't Pi's idea, but he still made assurances to community members, went along with it, and I definitely hold him accountable for his part. I have tried to have productive conversations with Pi at in person events, and through third parties....but he still has me blocked. It seems that its simply easier for him to play the victim than to have an honest conversation about his role in what happened. I'm not trying to rehash the past, but to see this kind of post...where the OP seems to believe he's some kind of victim or savior reads as egregious to me and warrants a response. The victims of the lawsuit deserve this at the very least. There is never any mention of the thousands of people that were harmed by Sundae Swap. OP's focus on his own financial outcome is especially offensive, considering many innocent retail participants had high six-figure losses as a result of Sundae Swap assurances. The mental gymnastics OP must go through to rationalize the guilt/accountability away and to replace with a victim/savior complex is simply unreal. The cognitive dissonance must be very painful for him, which is why he goes to such great lengths to try and paint himself as some kind of martyr or savior. I realize the political risk in responding here. Many choose to go along with this false narrative. I choose the truth and righteousness. I'm glad to be a part of CSWAP where incentives are aligned with community. I simply could not live with myself if I behaved like OP. The lack of humility is mind blowing. If I made a mistake that led to the financial damage for thousands of people, I would be trying to make it up to them....not ignoring them, and whining about nothing. I will not leave X/twitter. I will continue to be transparent with the community. I will continue to be honest, even in the face of backlash. This is how real trust is earned.

This is my post-mortem on @DriftProtocol : - They had a tough road trying to build a perps DEX on Solana, for reasons now apparent to most - The team members often communicated some of the challenges they were facing with onboarding traders to this uncomfortable environment – and change on the Solana side has been slow. I’d guess they’d be much higher in perps DEX rankings if not for those issues. - They were a big target (of their own success) and the victim of a sophisticated attack that many are likely vulnerable to at some level - They owned it and shared the details for all of us to learn and be better I hope they find a way to recover.

So from public posts, we know that there were a few deep pocketed supporters of @DriftProtocol ‘s success. I mean, it was Solana’s best hope to compete on perps at one point. So one could assume those same whales made some pretty hefty deposits as well to bootstrap liquidity, etc – which is now stuck. Ugh. (Which sucks for all btw – and always hurts the smaller net worth guys more than the whales) But doesn’t it seem like there should be more widespread reports of loss on the TL from way more people? Especially given the large amount? Makes me wonder if it was mostly concentrated with those few supporters. Whoever has done forensics on the wallets can maybe some light here on if it was an 80/20 type situation?

$285 million was hacked from Drift Protocol. The attacker drained USDC. Circle is now under fire — blockchain sleuth ZachXBT says faster action could have limited the losses. Circle's response: freezing without legal authorization carries its own legal risks. This is the stablecoin centralization debate in real time. One entity can freeze your funds. Or not. 🔐 #DeFi #Stablecoins #Crypto










