logo

Slow Fog: The multi-signature mechanism was modified more than a week before Drift was stolen, and then the administrator privileges were leaked

By: rootdata|2026/04/02 10:42:00
0
Share
copy

The analysis of the Drift theft incident by Slow Fog pointed out that a week before the attack, Drift adjusted its multi-signature mechanism to "2/5" (1 old signer + 4 new signers) and did not set a timelock. The attacker then gained administrator privileges, forged CVT tokens, manipulated the oracle, disabled security mechanisms, and transferred high-value assets from the liquidity pool.

Currently, the stolen funds have mainly been aggregated to an Ethereum address, totaling approximately 105,969 ETH (about 226 million USD). Slow Fog stated that the flow of related funds is still being tracked.

-- Price

--

You may also like

Morning News | OpenAI completes $122 billion financing; SpaceX has secretly submitted IPO application; B2C2 sets Solana as the mainnet for institutional stablecoin settlement

Overview of Important Market Events on April 1st

Claw Wallet: Let Agent's on-chain assets no longer run naked

Bid farewell to the era of AI Agent out of control leading to asset depletion. The Claw Wallet, designed specifically for intelligent agents, officially launched today, completely ending the era of "naked running" on the chain with dynamic risk control and key sharding.

Dialogue with BlackRock's Head of Digital Assets: How do tokenized stocks work?

Tokenization is essentially a story of "access," allowing more investors to reach asset classes that were previously difficult to access.

Is the Middle East Conflict Really Coming to an End?

What is the future trend of oil price, gold, and Bitcoin? Is the Iranian regime, global energy, and financial markets facing a larger transformation?

How to Rediscover Your Lost Creativity in the AI Age

Go play, go create, even if it's just starting from a very, very small thing.

How to Win at WEEX's Joker Returns 2026: Poker Card Strategy & Tips

Learn how to win at WEEX Joker Returns 2026 using poker-style card combos and Joker wildcard strategy. Discover how stronger hands improve multipliers and reward potential.

Popular coins

Latest Crypto News

10:42

Data: The total net outflow of the US XRP spot ETF in a single day is $1.3158 million

According to SoSoValue data, the XRP spot ETF had a total net outflow of $1.3158 million in a single day. The historical total net inflow currently stands at -$25.1838 million. As of the time of writing, the total net asset value of the XRP spot ETF is $948 million, with an XRP net asset ratio of 1....
10:42

Analysis: The money laundering path of the stolen funds from Drift involves Backpack accounts, and KYC information may be a key clue

According to on-chain analyst aryan's disclosure on the X platform, in the attack incident on the Drift protocol treasury, the attacker's address obtained funds through NEAR Intents 8 days ago but remained inactive until receiving a large amount of assets from the Drift treasury.The attacker transfe...
10:42

Data: The giant whale "pension-usdt.eth" has opened a new ETH short position and increased its BTC short position, with a total position size of 92.4 million USD

According to Onchain Lens monitoring, the whale "pension-usdt.eth" opened a new short position of 20,000 ETH (3x) and increased its short position in BTC (3x) to 750 BTC, with a total value of $92.4 million.Currently, its floating profit exceeds $1.6 million, and total profit has now surpassed $32 m...
10:42

The Euro Stoxx 50 index futures fell by 1.2%, and the German DAX index dropped by 1.2%

According to Jinshi News, the European Stoxx 50 index futures have expanded their decline to 1.2%, the German DAX index futures have dropped by 1.2%, and the UK FTSE 100 index futures have fallen by 0.2%.
10:42

ZachXBT once again criticized Circle for inaction during the Drift hacking incident, which allowed stolen funds to flow out of Solana via CCTP

Renowned on-chain detective ZachXBT has once again criticized Circle, stating that the Drift hacking incident occurred during U.S. trading hours, with millions of USDC transferred from Solana to Ethereum via CCTP (Circle's cross-chain protocol), while Circle remained inactive and took no action.A fe...
Read more
Community
iconiconiconiconiconiconicon

Customer Support Bot：@WEEX_support_smart_Bot

VIP Services：support@weex.com