$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

The decentralized exchange Drift confirmed that a $285 million theft on April 1, 2026, resulted from a six-month social engineering operation orchestrated by the Democratic People’s Republic of Korea (DPRK), initiated in fall 2025. The attack targeted Drift, a Solana-based platform, and was described as a meticulously planned, long-term campaign. No specific technical vulnerabilities, CVE IDs, or attack vectors were disclosed in the available details. The incident represents one of the largest cryptocurrency heists attributed to state-sponsored actors. The operation’s duration and sophistication highlight the persistent threat posed by DPRK-linked cybercrime groups.