NewsPublished 3 Apr 2026

North Korean Hackers Drain $285 Million From Drift in 10 Seconds

Source SecurityWeek

Description

The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post North Korean Hackers Drain $285 Million From Drift in 10 Seconds appeared first on SecurityWeek .

Impact

The attackers successfully stole $285 million by exploiting administrative key control and transaction mechanisms, resulting in a substantial financial loss. The compromise of an admin key indicates a critical breach of privileged access controls, enabling unauthorized fund transfers from multiple vaults.

Defensive guidance

Immediate mitigation steps should focus on securing administrative keys, reviewing transaction validation processes, and enhancing access controls once guidance is available.

Summary

The threat involves a coordinated attack by North Korean actors who compromised an administrative key within the Drift platform. Utilizing multiple nonce-based transactions and pre-prepared infrastructure, the attackers drained funds from five separate vaults in a very short timeframe (10 seconds). The incident highlights a significant compromise of administrative controls and transaction validation mechanisms within the affected system.

References

securityweek.com/north-korean-hackers-drain-285-million-from-drift-in-10-seconds/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 3 Apr 2026, 10:00 UTC

References

Community reviews