.@DriftProtocol on #Solana was exploited several hours ago. According to its public statement, this incident was not caused by a bug in its programs or smart contracts, and there is no evidence of compromised seed phrases. The attacker appears to have tricked multisig signers into approving durable-nonce pre-signatures, enabling admin takeover and parameter abuse.
Specifically, the attacker obtained approvals through phishing or misleading signing flows and prepared malicious admin-transfer transactions in advance.
At execution, the attacker sent a transaction beginning with AdvanceNonceAccount, which advanced the durable nonce and enabled delayed execution of the pre-signed flow on-chain, rather than expiring like a standard recent-blockhash transaction. The flow then proceeded through proposalApprove and vaultTransactionExecute, triggered UpdateAdmin, and completed the admin takeover.
After that, the attacker:
1. created a malicious or illiquid collateral market, identified on-chain as CVT, with permissive risk parameters;
2. switched to an attacker-controlled oracle and inflated CVT pricing;
3. raised or removed withdrawal guardrails across major real-asset markets.
The attacker then posted large amounts of CVT as collateral, borrowed against the inflated value, and withdrew real assets including USDC, wETH, dSOL, JLP, and cbBTC.
Based on currently traceable on-chain activity, this was the primary value-extraction path. The current loss estimate is $285,279,417.
Admin transfer transaction:
https://solscan.io/tx/4BKBmAJn6TdsENij7CsVbyMVLJU1tX27nfrMM1zgKv1bs2KJy6Am2NqdA3nJm4g9C6eC64UAf5sNs974ygB9RsN1…
Loss-tracking reference:
https://solscan.io/account/HkGz4KmoZ7Zmk7HN6ndJ31UJ1qZ2qgwQxgVqQwovpZES?exclude_amount_zero=true&from_address=JCNCMFXo5M5qwUPg2Utu1u6YWp3MbygxqBsBeXXJfrw&remove_spam=true&page_size=100#transfers…

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers.
This was a highly sophisticated operation that appears to have involved

Drift

Twitter

@DriftProtocol 在Solana平台上的协议数小时前遭到攻击。根据其公开声明，此次事件并非由程式或智慧合约漏洞引起，也没有证据表明助记词已被泄露。攻击者似乎诱骗多重签署者批准了持久随机数预签名，从而实现了管理员权限的接管和参数滥用。
具体来说，攻击者透过网路钓鱼或误导性的签章流程获得批准，并提前准备了恶意管理员转帐交易。
在执行过程中，攻击者发送了一笔以 AdvanceNonceAccount 开头的交易，该交易推进了持久随机数，使得预签名流程能够在链上延迟执行，而不是像标准的最新区块哈希交易那样过期。随后，流程依序经过 proposalApprove 和 vaultTransactionExecute，触发 UpdateAdmin，最终完成了管理员权限的接管。
之后，攻击者：
1. 创建了一个恶意或流动性不足的抵押品市场，在链上被识别为 CVT，具有宽松的风险参数；
2. 转而使用攻击者控制的预言机，并抬高了 CVT 定价；
3. 在主要实体资产市场提高或取消提款限制。
攻击者随后以大量 CVT 作为抵押品，利用其虚高的价值进行借贷，并提取了包括USDC、wETH、dSOL、JLP 和 cbBTC 在内的真实资产。
根据目前可追踪的链上活动，这是主要的价值提取途径。目前的损失估计为 285,279,417 美元。
管理员转帐交易：
https://solscan.io/tx/4BKBmAJn6TdsENij7CsVbyMVLJU1tX27nfrMM1zgKv1bs2KJy6Am2NqdA3nJm4g9C6eC64UAf5sNs974ygB9RsN1…
损失追踪参考：
https://solscan.io/account/HkGz4KmoZ7Zmk7HN6ndJ31UJ1qZ2qgwQxgVqQwovpZES?exclude_amount_zero=true&from_address=JCNCMFXo5M5qwUPg2Utu1u6YWp3MbygxqBsBeXXJfrw&remove_spam=true&page_size=100#transfers…

Block 旗下的比特币项目比特币 at Block（Block 由 Twitter联创杰克·多西创立）刚刚宣布上线免费比特币水龙头，标记比特币分发模式的回归……

杰克·多西宣布了一项价值 100 万镁的项目，旨在免费赠送比特币。

微策略（Strategy）创办人 Michael Saylor 断言比特币已赢得全球叙事战，同时点名 BIP- […]
〈Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角〉这篇文章最早发布于动区BlockTempo《动区动趋-最具影响力的区块链新闻媒体》。

Michael Saylor 警告 BIP-110 是比特币最大威胁；四年周期已死、机构资本才是真主角

加密货币分析平台 CryptoQuant 最近发布的一份报告指出，比特币市场出现了显著分化。

分析显示，比特币内部需求已经萎缩……