.@DriftProtocol on #Solana was exploited several hours ago. According to its public statement, this incident was not caused by a bug in its programs or smart contracts, and there is no evidence of compromised seed phrases. The attacker appears to have tricked multisig signers into approving durable-nonce pre-signatures, enabling admin takeover and parameter abuse.
Specifically, the attacker obtained approvals through phishing or misleading signing flows and prepared malicious admin-transfer transactions in advance.
At execution, the attacker sent a transaction beginning with AdvanceNonceAccount, which advanced the durable nonce and enabled delayed execution of the pre-signed flow on-chain, rather than expiring like a standard recent-blockhash transaction. The flow then proceeded through proposalApprove and vaultTransactionExecute, triggered UpdateAdmin, and completed the admin takeover.
After that, the attacker:
1. created a malicious or illiquid collateral market, identified on-chain as CVT, with permissive risk parameters;
2. switched to an attacker-controlled oracle and inflated CVT pricing;
3. raised or removed withdrawal guardrails across major real-asset markets.
The attacker then posted large amounts of CVT as collateral, borrowed against the inflated value, and withdrew real assets including USDC, wETH, dSOL, JLP, and cbBTC.
Based on currently traceable on-chain activity, this was the primary value-extraction path. The current loss estimate is $285,279,417.
Admin transfer transaction:
https://solscan.io/tx/4BKBmAJn6TdsENij7CsVbyMVLJU1tX27nfrMM1zgKv1bs2KJy6Am2NqdA3nJm4g9C6eC64UAf5sNs974ygB9RsN1…
Loss-tracking reference:
https://solscan.io/account/HkGz4KmoZ7Zmk7HN6ndJ31UJ1qZ2qgwQxgVqQwovpZES?exclude_amount_zero=true&from_address=JCNCMFXo5M5qwUPg2Utu1u6YWp3MbygxqBsBeXXJfrw&remove_spam=true&page_size=100#transfers…

Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift’s Security Council administrative powers.
This was a highly sophisticated operation that appears to have involved

Drift

Twitter

@DriftProtocol 在Solana平台上的協議數小時前遭到攻擊。根據其公開聲明，此次事件並非由程式或智慧合約漏洞引起，也沒有證據表明助記詞已被洩露。攻擊者似乎誘騙多重簽署者批准了持久隨機數預簽名，從而實現了管理員權限的接管和參數濫用。
具體來說，攻擊者透過網路釣魚或誤導性的簽章流程獲得批准，並提前準備了惡意管理員轉帳交易。
在執行過程中，攻擊者發送了一筆以 AdvanceNonceAccount 開頭的交易，該交易推進了持久隨機數，使得預簽名流程能夠在鏈上延遲執行，而不是像標準的最新區塊哈希交易那樣過期。隨後，流程依序經過 proposalApprove 和 vaultTransactionExecute，觸發 UpdateAdmin，最終完成了管理員權限的接管。
之後，攻擊者：
1. 創建了一個惡意或流動性不足的抵押品市場，在鏈上被識別為 CVT，具有寬鬆的風險參數；
2. 轉而使用攻擊者控制的預言機，並抬高了 CVT 定價；
3. 在主要實體資產市場提高或取消提款限制。
攻擊者隨後以大量 CVT 作為抵押品，利用其虛高的價值進行借貸，並提取了包括USDC、wETH、dSOL、JLP 和 cbBTC 在內的真實資產。
根據目前可追蹤的鏈上活動，這是主要的價值提取途徑。目前的損失估計為 285,279,417 美元。
管理員轉帳交易：
https://solscan.io/tx/4BKBmAJn6TdsENij7CsVbyMVLJU1tX27nfrMM1zgKv1bs2KJy6Am2NqdA3nJm4g9C6eC64UAf5sNs974ygB9RsN1…
損失追蹤參考：
https://solscan.io/account/HkGz4KmoZ7Zmk7HN6ndJ31UJ1qZ2qgwQxgVqQwovpZES?exclude_amount_zero=true&from_address=JCNCMFXo5M5qwUPg2Utu1u6YWp3MbygxqBsBeXXJfrw&remove_spam=true&page_size=100#transfers…

微策略（Strategy）創辦人 Michael Saylor 斷言比特幣已贏得全球敘事戰，同時點名 BIP- […]
〈Michael Saylor 警告 BIP-110 是比特幣最大威脅；四年週期已死、機構資本才是真主角〉這篇文章最早發佈於動區BlockTempo《動區動趨-最具影響力的區塊鏈新聞媒體》。

Michael Saylor 警告 BIP-110 是比特幣最大威脅；四年週期已死、機構資本才是真主角

全球黃金外匯儲備總額已達約 4 兆美元，首次超越外國持有的美國公債（約 3.9 兆美元），這是 1996 年以 […]
〈黃金 30 年來首度超越美債！躍升全球最大外匯儲備，央行資產配置邏輯為何重寫？〉這篇文章最早發佈於動區BlockTempo《動區動趨-最具影響力的區塊鏈新聞媒體》。

黃金 30 年來首度超越美債！躍升全球最大外匯儲備，央行資產配置邏輯為何重寫？

來源：Coin Stories
整理：Felix, PANews
彭博資訊高級 ETF 分析師 James Seyffart 再次做客《Coin Stories》，深入剖析 ETF 領域的最新動態：從比特幣 ETF 持有者在 50% 跌幅中出人意料的“鑽石手”策略，到摩根士丹利推出自有比特幣 ETF 的里程碑式決定。
主持人：有一陣子沒涉及 ETF 這個話題了。不如從比特幣開始，比特幣 ETF 目...