$250M gone. All because one admin key had god-mode over an entire protocol. The Drift exploit is a reminder that your attack surface doesn't end at your Solidity. Compromised signers can rewrite risk rules, spoof oracles, and disable circuit breakers, all in a single transaction. Audit the key. Audit the governance. Audit the entire attack surface. #Drift

Drift
@DriftProtocol
Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers. This was a highly sophisticated operation that appears to have involved
From Twitter
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments