The People You Trust May Be the Greatest Risk Drift Protocol Social Engineering Attack

On April 1, 2026, Drift Protocol — a decentralized derivatives exchange on Solana — was drained of approximately $285 million. This was not a code exploit. Attackers spent six months posing as a quantitative trading firm, building genuine relationships with Drift team members at real crypto conferences. They exchanged business cards, shared meals, and earned trust over time. Once that trust was established, they sent malicious links and code repositories for team members to run on their own machines — ultimately gaining control of admin private keys. With those keys in hand, the attackers completed the withdrawal in under 12 minutes.