Drift protocol funds stolen in exploit; on-chain message from apparent attacker to Drift team offers white hat negotiation for return of stolen assets.
Security & Exploits ·
Funds were stolen from Drift Protocol in an exploit, with an on-chain message sent to the Drift team from an address associated with the apparent attacker. The sender, claiming to be a manager of a Drift vault strategy, characterized the stolen assets as held in accounts controlled by the attacker and argued that returning them depends on the attacker's willingness rather than external enforcement.
The message offers a white hat negotiation framework, proposing that the attacker receive a percentage reward in exchange for returning the protocol's funds. The sender provided an email address for discussion and stated that recovered funds would be sent directly to official Drift wallets rather than claimed as personal assets. The sender also asserted they have direct contact with the Drift team and can verify this relationship.
Details about the stolen amount, the nature of the vulnerability, and whether the Drift team has engaged with the offer remain unclear. No confirmation of the sender's identity or affiliation with Drift has been established.