Drift $280M crypto theft linked to 6-month in-person operation
bleepingcomputer.com Apr 7, 2026

Drift $280M crypto theft linked to 6-month in-person operation

AI-summarised brief · reviewed before publication

A $280 million crypto theft from the Drift Protocol was linked to a 6-month in-person operation by North Korean hackers. They posed as a quantitative firm, attending crypto conferences and engaging with contributors via Telegram. The sophisticated attack allowed hijacking of administrative powers, draining user assets in 12 minutes. Investigations point to threat actor UNC4736, with Drift Protocol freezing functions and flagging attackers' wallets to prevent fund movement.