1/ The core of the vulnerability in Drift Protocol lies in the breach of the multisig governance mechanism. The attacker updated the administrator privileges of the Drift state account and initialized a spot market vault based on a scam token $CVT.

We are observing unusual activity on the protocol. We are currently investigating. Please do not deposit funds into the protocol while we investigate. This is not an April Fools joke. Proceed with caution until further notice. We’ll provide additional updates from this account.

Drift

Twitter

1/ Drift协议漏洞的核心在于多重签名治理机制遭到破坏。攻击者更新了Drift状态账户的管理员权限，并基于诈骗代币$CVT初始化了一个现货市场金库。

Block 旗下的比特币项目比特币 at Block（Block 由 Twitter联创杰克·多西创立）刚刚宣布上线免费比特币水龙头，标记比特币分发模式的回归……

杰克·多西宣布了一项价值 100 万镁的项目，旨在免费赠送比特币。

微策略（Strategy）创办人 Michael Saylor 断言比特币已赢得全球叙事战，同时点名 BIP- […]
〈Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角〉这篇文章最早发布于动区BlockTempo《动区动趋-最具影响力的区块链新闻媒体》。

Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角

加密货币分析平台 CryptoQuant 最近发布的一份报告指出，比特币市场出现了显著分化。

分析显示，比特币内部需求已经萎缩……

比特币数据出现重大偏差：在极度恐慌时期，超过 10 亿美元的资金流入BTC ETF！

2/ The attacker made $CVT valuation extremely high by manipulating the oracle price. Then, by leveraging Drift's cross-margin and exchange functions, a large amount of almost valueless CVTS were deposited and real assets were withdrawn, resulting in losses of about $270M.

2/ 攻击者通过操纵预言机价格，将 $CVT 的估值抬得极高。然后，利用 Drift 的交叉保证金和兑换功能，存入了大量几乎毫无价值的 CVTS，并提取了真实资产，导致损失约 2.7 亿美元。