Mar 23, 2026
0 new drains, 2 updates.
Updated
-
Drift Protocol drained of $270M+ after signers pre-signed durable-nonce admin transactions
On Apr 1, 2026, an attacker took admin control of the Solana perps exchange Drift and drained its vaults of at least $270 million; SlowMist lists $285 million. Weeks earlier, Security Council signers had been led into 'unauthorized or misrepresented' approvals. Because those transactions used durable nonces, they stayed valid until the attacker chose to submit them. The funds were bridged to Ethereum, including more than $230 million in USDC via Circle's CCTP. No code bug was needed. The lesson for teams is that any durable-nonce signing request is high risk.
Drift Protocol (Security Council multisig)·Solana·$285M stolen·Since Apr 1, 2026·
-
Critical✓Contained
Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens
On 21 March 2026 an attacker obtained a privileged private key used by Resolv's off-chain minting service, deposited about $100K-$200K in USDC and minted about 80M USR, which the contracts did not cap. They swapped out for about 11,408 ETH, roughly $24.5M, and USR fell to about 26 cents. Resolv paused its app, offered the attacker a 10% bounty and asked holders not to trade USR while it works on recovery.
Resolv Labs USR stablecoin and holders·Ethereum·$25M stolen·Since Mar 21, 2026·