Drift Protocol, the largest decentralized perpetual futures exchange on the Solana blockchain, experienced a major security incident on April 1, 2026, with Elliptic calculating that the combined value of assets stolen in this exploit was $286 million. Elliptic has identified multiple indicators suggesting that the exploit of Drift Protocol is linked to the Democratic People's Republic of Korea (DPRK), with the on-chain behavior, laundering methodologies and network-level indicators associated with the attack consistent with techniques observed in previous DPRK-attributed operations. According to DefiLlama, Drift's total value locked collapsed from approximately $550 million to under $250 million following the attack, making it the largest DeFi hack of 2026 to date and the second-largest security incident in the Solana ecosystem. On-chain data shows that the attacker's wallet was created approximately eight days before the exploit and received a small test transfer from a Drift vault during that period, suggesting a premeditated and carefully staged operation.