# Hack İlgili Makaleler

HTX Haber Merkezi, kripto endüstrisindeki piyasa trendleri, proje güncellemeleri, teknoloji gelişmeleri ve düzenleyici politikaları kapsayan "Hack" hakkında en son makaleleri ve derinlemesine analizleri sunmaktadır.

Crypto Shockwave: Circle Sued As $280 Million Drift Hack Unravels

A class action lawsuit has been filed in a Massachusetts federal court against Circle Internet Financial, alleging the stablecoin issuer was negligent and aided in the theft of $280 million from the Drift Protocol. The plaintiffs, representing over 100 investors, argue Circle had the means to stop the stolen USDC from being moved across blockchains using its Cross-Chain Transfer Protocol but failed to act. They point to Circle's prior action of freezing wallets in a separate civil case as proof it could have intervened. The April 1st hack is attributed to North Korean state-backed actors who moved the funds to Ethereum and laundered them through Tornado Cash. The case raises significant questions about the responsibility of centralized entities in the decentralized crypto ecosystem.

bitcoinist9 saat önce

Crypto Shockwave: Circle Sued As $280 Million Drift Hack Unravels

bitcoinist9 saat önce

In-Depth Reconstruction of the $285 Million Drift Hack: How Should DeFi Governance Move Beyond "Amateur Hour"?

On April 1, 2026, Drift Protocol, the largest perpetual futures DEX on Solana, suffered a catastrophic hack resulting in a loss of $285 million. The attack, attributed to a sophisticated social engineering campaign rather than a technical exploit, unfolded over several months. Hackers first infiltrated Drift’s internal circles by posing as a legitimate market maker, building trust over time. They then exploited Solana’s "Durable Nonce" feature to trick core team members into blindly signing transactions that granted administrative control. A critical vulnerability was introduced when Drift migrated to a 2/5 multisig structure without a timelock, allowing instant execution of privileged transactions with just two signatures. The attackers finally triggered the attack by adding a fake token (CVT) to the whitelist, manipulating its oracle price, and using it as collateral to drain the protocol’s treasury. The incident highlights fundamental flaws in DeFi governance, including overreliance on multisig mechanisms that lack intent verification and are vulnerable to social engineering. It underscores the misalignment between retail-grade security tools and institutional-scale treasury management. The hack signals the need for a security paradigm shift in DeFi, including adoption of Hardware Security Modules (HSMs) for key management, intent-based policy engines for transaction validation, and professional third-party custody solutions to ensure institutional-grade safety.

marsbit04/13 12:00

In-Depth Reconstruction of the $285 Million Drift Hack: How Should DeFi Governance Move Beyond "Amateur Hour"?

marsbit04/13 12:00

1 Billion DOT Minted Out of Thin Air, Yet Hacker Only Made $230,000

On April 13, a security breach occurred involving the Polkadot bridge on the Ethereum network, where an attacker exploited a replay vulnerability in the MMR proof mechanism of Hyperbridge’s ISMP protocol. By reusing a historically valid proof and pairing it with a malicious request, the attacker bypassed verification and gained admin and minting rights over the wrapped DOT contract on Ethereum. They then minted 1 billion wrapped DOT tokens—2,805 times the existing supply—and attempted to liquidate them. However, due to extremely low liquidity in the wrapped DOT market, the massive sell-off crashed the token’s price by 99.98%, from $1.22 to approximately $0.000128. The attacker ultimately exchanged the tokens for only about 108.2 ETH (worth roughly $237,000), with gas costs as low as $0.74. The same exploit had been used previously in attacks on MANTA and CERE tokens, resulting in a total loss of around $242,000. Polkadot confirmed that the incident only affected DOT bridged via Hyperbridge to Ethereum and did not impact the native Polkadot network or DOT on other bridges. Exchanges including Upbit and Bithumb temporarily suspended DOT deposits and withdrawals as a precaution. The event highlights ongoing vulnerabilities in cross-chain infrastructure and the critical role of liquidity in limiting actual damages during large-scale exploits. It also reflects a broader trend of increasing DeFi security incidents in early 2026.

marsbit04/13 10:10

1 Billion DOT Minted Out of Thin Air, Yet Hacker Only Made $230,000

marsbit04/13 10:10

All about why blockchain firms will now become part of U.S Treasury’s cybersecurity program

The U.S. Department of the Treasury has launched a new initiative through its Office of Cybersecurity and Critical Infrastructure Protection (OCCIP) to include blockchain and crypto firms in a cybersecurity program. This move aims to share timely cyber threat intelligence to help these firms prevent and respond to attacks. The announcement comes amid ongoing security challenges in the crypto industry, highlighted by incidents like the 2026 Drift Protocol attack, which resulted in approximately $285 million in losses and was linked to state-backed cyber operations. The article underscores that security vulnerabilities remain a critical systemic risk in crypto, capable of triggering prolonged market downturns, as seen during the 2022 crash following the collapse of FTX. By providing early warnings and fostering coordinated risk management, the Treasury’s program seeks to strengthen institutional confidence and reduce the likelihood of future large-scale market disruptions.

ambcrypto04/10 23:02

All about why blockchain firms will now become part of U.S Treasury’s cybersecurity program

ambcrypto04/10 23:02

A $280 Million Lesson! The 2026 DeFi Security Guide to Avoiding Pitfalls

"DeFi Security Lessons from a $280M Hack: A 2026 Guide to Avoiding Pitfalls" The rapid growth of DeFi has turned it from a niche interest into a mainstream pursuit for high yields. However, this comes with significant risks, highlighted by a major attack on Solana's Drift Protocol in April 2026, resulting in losses between $220-$285 million. This event underscores that in DeFi, users bear full responsibility for their assets. Most losses occur during normal operations through common vulnerabilities: 1. **Excessive Token Approvals**: Granting unlimited contract permissions can lead to complete asset drainage. 2. **Phishing Websites**: Fake sites mimic legitimate projects to steal wallet credentials. 3. **Contract Exploits**: Code vulnerabilities allow hackers to legally drain funds. 4. **Rug Pulls**: Malicious projects withdraw liquidity, causing tokens to crash. The guide outlines five essential pre-interaction checks: 1. **Contract Security**: Verify contracts are open-source and audited by firms like CertiK. Avoid unaudited or newly deployed contracts. 2. **Authorization Management**: Avoid unlimited approvals; use minimal permissions and regularly revoke unused allowances via tools like revoke.cash. 3. **Official Access Points**: Bookmark official sites from trusted sources (e.g., project Twitter/Discord) to avoid phishing scams, which cause over 60% of losses. 4. **Abnormal Yields**: Extreme APYs (e.g., stablecoins >20%) often signal scams. Compare rates to established protocols like Aave. 5. **Asset Segregation**: Use a multi-wallet system (hot, DeFi, cold) to isolate assets and prevent total loss from a single breach. Additional risks include insider threats from developers or employees with privileged access. Psychological biases (e.g., FOMO) and AI-powered phishing make users susceptible. Core principles: never grant unlimited approvals, avoid unknown links, and diversify investments. Security is not optional but a fundamental requirement in DeFi.

marsbit04/08 00:06

A $280 Million Lesson! The 2026 DeFi Security Guide to Avoiding Pitfalls

marsbit04/08 00:06

Solana Tries To Turn Fear Into FOMO — Can STRIDE Really Stop The Next $300M Rug?

The Solana Foundation has launched a new security initiative called STRIDE (Solana Trust, Resilience and Infrastructure for DeFi Enterprises) in collaboration with Asymmetric Research. This framework is designed to continuously assess and oversee the security of projects built on Solana through an eight-pillar system, with results made public. Alongside STRIDE, the Solana Incident Response Network (SIRN) was introduced—a coalition of security firms focused on threat intelligence and coordinated responses to hacks. These efforts follow a recent $286 million exploit on the Drift Protocol and represent a shift toward continuous, foundation-funded security monitoring rather than one-time audits. While these measures may help restore trust, new exploits on unaudited protocols could still face severe market reactions.

bitcoinist04/07 21:01

Solana Tries To Turn Fear Into FOMO — Can STRIDE Really Stop The Next $300M Rug?

bitcoinist04/07 21:01

Solana rolls out ‘STRIDE,’ a DeFi-wide security push after $285 mln Drift breach

In response to the $285 million Drift protocol hack, the Solana Foundation has launched a comprehensive, two-tiered security initiative called STRIDE (Solana Trust, Resilience, and Infrastructure for DeFi Enterprises). This program will proactively evaluate, monitor, and escalate security issues for DeFi projects with over $10M in total value locked (TVL), setting new security standards and requiring independent audits. For protocols with over $100M TVL, the Foundation will support formal security checks. A second layer, the Solana Incident Response Network (SIRN), unites security firms to react to active threats. The move aims to rebuild trust and prevent future incidents, with early data showing investor liquidity on Solana remained stable despite the recent breach.

ambcrypto04/07 09:17

Solana rolls out ‘STRIDE,’ a DeFi-wide security push after $285 mln Drift breach

ambcrypto04/07 09:17

DeFi loses $169M in Q1 as Circle pushes for quantum security – Details

DeFi security in Q1 saw $169 million lost across 34 protocols, primarily to operational weaknesses rather than cryptographic failures. Key compromises and permission errors accounted for a majority of attacks, with 63% linked to access control issues. While immediate threats remain execution-based, long-term quantum risks are gaining attention. Circle is proactively adopting Post-Quantum Cryptography (PQC), and new chains like Arc are building quantum-resistant features natively to avoid future upgrade challenges. Legacy chains, however, face slow adoption due to scalability and coordination hurdles, with significant value still locked in incumbent systems. The market currently prioritizes liquidity and usability, delaying broader PQC transition despite rising future threats.

ambcrypto04/07 03:58

DeFi loses $169M in Q1 as Circle pushes for quantum security – Details

ambcrypto04/07 03:58

Drift Protocol incident uncovered: Did ‘negligence’ lead to the $285M loss?

Drift Protocol's $285 million hack underscores a critical industry lesson: security cannot be sacrificed for scalability. This incident, potentially linked to the same group behind the 2024 Radiant Capital hack, reveals a meticulously planned attack where perpetrators posed as a legitimate firm to gain trust. In response, Drift froze protocol functions and collaborated with law enforcement, though market confidence remained shaken. The timing is significant, as Solana recently tested quantum-resistant upgrades that slowed the network by 90%, highlighting the inherent trade-offs between security and performance. Public scrutiny has intensified, with some labeling the breach "civil negligence," signaling a shift in the 2026 cycle toward prioritizing security, accountability, and quantum-threat preparedness over mere scalability.

ambcrypto04/06 20:17

Drift Protocol incident uncovered: Did ‘negligence’ lead to the $285M loss?

ambcrypto04/06 20:17

‘Beyond code errors’ – How Drift Protocol’s $285mln drain shifts DeFi security bar

The Drift Protocol exploit, resulting in a $285 million loss, marks a significant shift in DeFi security threats, moving beyond simple code errors to sophisticated attacks on governance and operational control layers. The attacker used pre-signed transactions and manipulated a multi-signature mechanism to gain admin access rapidly. This incident underscores that security now depends more on protecting protocol operations and user assets than solely fixing smart contract bugs. Drift’s response demonstrated the critical role of fast crisis management—halting deposits and withdrawals quickly, coordinating with security partners, and providing transparency—which helped contain cross-protocol risks and maintain market confidence. The event reflects a broader trend in DeFi, where attackers increasingly target access and control mechanisms. This has elevated the importance of operational security, prompting protocols to compete not only on yield but also on their ability to manage risk, protect capital, and respond effectively during crises. Industry data shows a growing focus on security investments, such as signer rotation and emergency controls, as key factors in building resilience and trust.

ambcrypto04/06 05:03

‘Beyond code errors’ – How Drift Protocol’s $285mln drain shifts DeFi security bar

ambcrypto04/06 05:03

活动图片

Indepth Research

Regulatory Policy