👺The hacking attack on Drift Protocol was a "structured infiltration operation that required organizational support, significant resources, and several months of meticulous preparation," the project team stated.

According to protocol representatives, the incident causing approximately $280 million in damages was carried out by a North Korean group. It took them six months to plan and execute the attack.

The attackers infiltrated Drift by posing as an external trading platform. Since last fall, they have been in close contact with developers regarding integration and have been establishing shared storage.

Data obtained during the investigation linked the attack to the UNC4736 group — a North Korean state entity also known as AppleJeus or Citrine Sleet. They were also responsible for hacking Radiant Capital for over $50 million in 2024.