Drift Protocol, Solana’s leading perpetuals exchange, said it was under active attack and moved to suspend deposits and withdrawals while it worked to contain the incident. The team said it was coordinating with security firms, bridge operators, and exchanges, as on-chain estimates put the losses at about $270 million, with the final scale still being determined.
Early reports pointed to a leaked private key, although the root cause had not been confirmed in the script. What was clear was that the attackers quickly converted the stolen funds into USDC and Ethereum and began bridging assets across chains, a sequence that complicates tracing and recovery.
For users, the immediate effect was operational rather than theoretical: they were locked out of managing positions or accessing funds while the protocol tried to stem losses. In thin market conditions, that kind of interruption carries broader consequences because it can damage confidence beyond the affected venue.
The next phase now depends on whether coordination across Solana infrastructure and centralised exchanges can recover any of the assets, and on how recovery headlines affect sentiment. The episode is also a reminder that in a quiet market, event risk remains close, and a single exploit can shift conditions from calm to disorder very quickly.