Solana DeFi platform Drift confirms ‘active attack’ as $200M+ leaves platform
The platform halted deposits while it investigates suspicious activity and urges users to proceed with caution.
What to know:
— Drift, a Solana-based DeFi platform, said it is investigating «unusual activity» on its protocol and urged users not to deposit funds while the review is underway.
— The alert sparked speculation across the crypto community, with some users reporting irregular behavior in their positions on the platform.
— Helius CEO Mert Mumtaz said it appears Drift «might be getting exploited,» raising concerns that any confirmed breach could endanger user funds and weigh on Solana’s resurgent DeFi ecosystem.
Solana-based decentralized finance (DeFi) platform Drift warned users about an «active attack» on its platform Wednesday, saying it had suspended withdrawals and deposits.
«We are coordinating with multiple security firms, bridges and exchanges to contain the incident,» the account said.
Drift had earlier said it was investigating “unusual activity” on its protocol, prompting concerns that the platform may have been exploited.
“We are observing unusual activity on the protocol. We are currently investigating. Please do not deposit funds into the protocol while we investigate,” Drift wrote in a post on X. “This is not an April Fools joke. Proceed with caution until further notice. We’ll provide additional updates from this account.”
The warning triggered speculation across the crypto community, with some users reporting irregular behavior tied to their positions.
Helius CEO Mert Mumtaz added to the concern in a separate X post, writing, “not 100% fully certain yet, but it seems drift might be getting exploited.” Helius is a key infrastructure provider on Solana, offering APIs and node services that developers and platforms rely on to access blockchain data.
Arkham data said over $250 million had moved from Drift to an interim wallet, before moving to various other addresses. Less than $600,000 was in the address as of press time.
The Drift (DRIFT) token’s price fell over 20% in the hours after the exploit was first reported, trading at about $0.05 as of press time.
If confirmed, an exploit could affect user funds and add pressure on Solana’s DeFi ecosystem, which has seen renewed growth in recent months.
Solana’s (SOL) price fell over the past few hours but recovered a bit after hitting a localized bottom at $83.82, and is still up over 1% on the day’s trading.
UPDATE (April 1, 2026, 18:49 UTC): Adds additional detail.
Mike Novogratz’s crypto financial services firm said unauthorized access was limited to a segregated R&D workspace; trading systems and client accounts were unaffected.
What to know:
— Unauthorized access was limited to an isolated R&D workspace, not production systems.
— Galaxy says no client funds or account data were accessed or at risk.
— All trading platforms and services remain fully functional and unaffected, the firm said.