North Korea Link Behind Massive Exploit
On April 1, Drift Protocol, Solana’s largest decentralized perpetual futures exchange, suffered an exploit that drained over $270 million in user funds. Blockchain analytics firms have traced the attack to a group linked to North Korea that had infiltrated the platform by posing as a quantitative trading firm for approximately six months prior to the incident. The attackers utilized Circle’s Cross-Chain Transfer Protocol (CCTP) to move more than $232 million USDC from Solana to Ethereum, making recovery efforts more complex.
This exploit was not only significant in scale—impacting around $280 million according to several reports—but also in its method, leveraging cross-chain infrastructure to evade immediate detection and freezing. The losses represent one of the largest DeFi hacks of 2024 so far.
Elliptic identified the exploiters as a North Korea-linked group active for at least six months before the April 1 breach.
Tether Steps In as White Knight
In response to the breach, Drift Protocol secured a proposed funding package totaling up to $147.5 million, with $127.5 million coming directly from Tether and an additional $20 million from undisclosed partners. This rescue plan is structured as a mix of revenue-linked credit facilities, ecosystem grants, and loans aimed at supporting market makers and user recovery. According to coindesk.com, this funding will serve as the backbone for Drift’s relaunch efforts and help restore user confidence following the devastating exploit.
Tether’s involvement marks one of the largest stablecoin-backed bailouts in DeFi history.
The funding is designed not only to provide immediate liquidity but also to create a long-term recovery pool. A portion of future trading revenue and committed capital will be allocated toward covering roughly $295 million in user losses over time—a figure that slightly exceeds the initial amount lost due to slippage and further market volatility since the hack.
USDC Out, USDT In for Drift
One of the most consequential changes arising from this episode is Drift Protocol’s decision to pivot away from Circle’s USDC stablecoin in favor of Tether’s USDT as its core settlement asset. The protocol will relaunch as a USDT-based perpetual futures exchange on Solana, replacing USDC after it was used by hackers to siphon funds across chains.
On paper, both USDC and USDT are dollar-pegged stablecoins designed for seamless crypto trading. But after this exploit—and Circle’s refusal to freeze stolen funds unless legally compelled—Drift has opted for Tether’s product instead. This move not only reflects immediate security concerns but could also shift user behavior on Solana-based derivatives platforms.
Circle faced criticism when its stock dropped about 10% on April 9 following public outcry over its handling of the situation; however, it later rebounded by roughly 20%, highlighting investor uncertainty about stablecoin issuers’ roles during exploits.
See Also
User Losses Drive Recovery Measures
To address losses affecting more than 175,000 users—who previously contributed to over $150 billion in cumulative trading volume—Drift is introducing a transferable token that represents each affected user’s claim on the recovery pool. This mechanism allows users to potentially recoup their assets gradually as trading activity resumes and revenue streams are rebuilt. The protocol aims for full recovery of approximately $295 million in user losses through this approach.
Drift's governance token, DRIFT, has not escaped unscathed either; it has shed about 70% of its value since the exploit was disclosed. This sharp decline underscores both shaken community trust and broader market anxieties around DeFi security events.
It remains uncertain how quickly users will be made whole or whether DRIFT can recover its former valuation.
Solana’s Top Perp DEX Faces Reckoning
As Drift prepares its relaunch with Tether backing and a new settlement layer, questions linger about long-term security and user retention. While Tether claims it has worked with law enforcement agencies across 64 countries and helped recover $800 million in stolen crypto historically, there is no guarantee such outcomes will be repeated for every future incident.
For now, Drift Protocol stands at a crossroads: buoyed by a substantial rescue package but still facing skepticism from users who saw nearly $285 million vanish overnight. The next months will test whether robust funding and operational shifts can restore trust—or whether reputational damage lingers longer than even the deepest liquidity pool can fix.
Critical Points
- •Drift Protocol suffered an April 1, 2024 exploit linked to North Korea, resulting in over $270 million in user losses.
- •Tether and partners committed up to $147.5 million ($127.5 million from Tether) to Drift’s user recovery and relaunch.
- •Drift Protocol will switch its settlement asset from Circle’s USDC to Tether’s USDT as part of the recovery plan.
Next steps
Drift Protocol’s relaunch as a USDT-based perpetual futures exchange on Solana, backed by up to $147.5 million in funding from Tether and partners, will be the next measurable event; if the relaunch proceeds and the recovery pool is established as planned, affected users will immediately receive transferable tokens representing claims on the recovery pool, but the exact timeline for these distributions remains unclear.