Drift Exploit Uncovers $280M Breach via Solana Loophole

- Drift Protocol confirmed a $280 million exploit on April 2, 2026. - Attackers abused Solana’s "durable nonce" feature, sparking debates over stablecoin issuer accountability. Drift Protocol, a decentralized exchange on the Solana blockchain, confirmed a $280 million exploit on April 2, 2026. On April 2, CCN.com reported that attackers leveraged Solana’s durable nonce feature to gain unauthorized administrative access to the protocol. This mechanism allows pre-signed transactions to bypass expiration limits, and by using this vulnerability, the attackers drained assets across multiple categories. On April 2, BanklessTimes reported that the attackers converted most of the stolen funds into USD Coin (USDC) and bridged them to the Ethereum network. This exploit is now one of the largest decentralized finance (DeFi) hacks recorded this year. In response, Drift Protocol suspended deposits and withdrawals to investigate and mitigate further risks. Circle, the issuer of USDC, faced criticism for a delayed reaction. On-chain analyst ZachXBT and others in the crypto community pointed out that several hours passed before Circle froze the stolen funds, despite being aware of the breach. As a result, this delay has reignited broader discussions about the responsibilities of centralized stablecoin issuers in curbing illicit transactions and reacting swiftly during exploits. The event also exposed the inherent risks in blockchain innovation, particularly with features like Solana’s durable nonce. Although developers designed this feature for greater transaction flexibility, the attack demonstrates its potential to create significant vulnerabilities and amplify risks when combined with existing weaknesses. As of 14:08 UTC on April 2, Solana (SOL) was trading at $77.81 after a 5.87% dip in 24-hour trading volume, according to TradingView. Meanwhile, USD Coin (USDC) remained stable at $1, with a marginal 0.003% change in 24-hour trading volume.