Drift co-founder Cindy Leow steps down following a DPRK-attributed attack; the protocol relaunches as Velocity.
Security & Exploits ·
Cindy Leow, co-founder of Drift Protocol, has stepped down following a DPRK-attributed attack on the platform. The protocol has announced a relaunch under a new name, Velocity. The breach represents one instance in a broader pattern in which North Korea-linked actors have infiltrated crypto infrastructure and extracted substantial sums, with researchers documenting months-long presence inside affected protocols before executing major theft operations.
The attack on Drift resulted in the loss of a significant amount of user funds, prompting the team to develop a recovery mechanism. The relaunch as Velocity involves structural changes intended to address the security vulnerabilities that enabled the initial compromise. Details about the exact scope of the exploit, the timeline of the breach, and the specifics of Leow's departure remain incompletely documented in available reporting.
Questions persist about how the DPRK actors gained initial access, whether other Drift team members will remain in leadership roles, and what technical and operational measures Velocity will implement to prevent similar incidents. The incident underscores ongoing challenges facing decentralized finance protocols in defending against state-sponsored cyber operations targeting the ecosystem.