SlowMist: Drift bị tấn công sau khi thay đổi multisig và rò rỉ quyền quản trị

The Huoxing Finance report, on April 2, SlowMist published an analysis of the Drift hack, pointing out that one week before the attack, Drift adjusted its multisig mechanism to "2/5" (1 old signer + 4 new signers) without setting a timelock. The attacker subsequently gained administrative privileges, forged CVT tokens, manipulated oracles, disabled security mechanisms, and transferred high-value assets from the liquidity pool. Currently, the stolen funds have been primarily consolidated to Ethereum addresses, totaling approximately 105,969 ETH (around $226 million). SlowMist stated that the fund movements are still being actively tracked.