Drift Protocol, a decentralized cryptocurrency exchange, has alerted its users to suspend deposits after detecting unusual trading activity on its platform on Wednesday. The team acknowledged the incident in an initial announcement but did not disclose the specific cause or confirm the extent of any financial damage. An investigation is currently underway.
Blockchain cybersecurity researcher Vladimir S suggested the incident was likely the result of a private key leak. He indicated that the total funds lost could reach as high as $200 million, making it a potentially significant breach in the decentralized finance space. Vladimir S noted that the platform’s admin signer appeared to have been compromised, or that whoever controls it may have intentionally executed the changes.
According to Vladimir S, the stolen assets include wrapped versions of Bitcoin, Jito, and the Fartcoin memecoin, along with various stablecoins denominated in dollars, euros, and Japanese yen. These assets have reportedly been moved to multiple wallets following the incident. The distribution of funds across several wallets is a common tactic used to obscure the trail of stolen assets.
Drift Protocol has not yet provided a detailed breakdown of the losses or confirmed the findings put forward by the independent researcher. The exchange did not respond to a request for comment prior to publication. Users have been advised to refrain from depositing any funds until the platform confirms the issue has been resolved.
The incident highlights ongoing security vulnerabilities within decentralized exchanges, particularly those related to the management of private keys and administrative access. A compromised admin signer can grant an attacker broad control over platform functions, potentially enabling unauthorized transfers of user funds. The full scope of the breach is expected to become clearer as the investigation progresses and further details are disclosed.
Originally reported by CoinTelegraph.
