The original title is: "The Drift Protocol Hack: A Six-Month Social Engineering Operation"

Short summary

A six-month social engineering campaign targeting Drift Protocol's admin-key holders resulted in a $285M drain from Solana in April 2026. North Korea-linked actors now account for 76% of crypto hack losses by exploiting human trust rather than code vulnerabilities. Defense requires operational controls like multi-signature approvals and security culture, not code audits alone.

• •$285M Drift Protocol drain was a six-month social engineering campaign targeting admin-key holders, not a code exploit
• •North Korea-linked actors now dominate crypto hacks (76% of 2026 losses) by targeting humans and their trust
• •Defense requires multi-sig approvals, hardware wallets, time delays, and skepticism of unsolicited repos and job offers

Generated with AI, which can make mistakes.