Signal
285 Million Drift hack traced to six-month DPRK social engineering operation
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-04-05 18:25 UTCUpdated 2026-04-06 16:35 UTC
rss
breachesthreat_actorsincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
The $285 million cryptocurrency theft from the Solana-based decentralized exchange Drift on April 1, 2026, was the result of a meticulously planned social engineering campaign by the Democratic People's Republic of Korea (DPRK).
Score total
1
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
- The hack occurred recently on April 1, 2026, revealing new tactics by DPRK threat actors.
- Details of the six-month operation have just been disclosed, providing fresh insights.
- The incident underscores ongoing risks to the rapidly growing decentralized finance sector.
Why it matters
- Highlights the sophistication and persistence of DPRK cyber threat actors targeting DeFi platforms.
- Demonstrates the risks of long-term social engineering in compromising decentralized exchanges.
- Signals the need for enhanced operational security and insider threat detection in crypto ecosystems.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- The $285 million Drift hack was the result of a six-month social engineering campaign by DPRK actors.
How sources frame it
- The Hacker News And BleepingComputer: neutral
This incident highlights the increasing use of prolonged social engineering by nation-state actors to compromise DeFi platforms.
All evidence
All evidence
Drift $280M crypto theft linked to 6-month in-person operation
bleepingcomputer_all · bleepingcomputer.com · 2026-04-06 16:35 UTC
$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation
thehackernews · thehackernews.com · 2026-04-05 18:25 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- bleepingcomputer_all (1)
- thehackernews (1)
Top origin domains (this list)
- bleepingcomputer.com (1)
- thehackernews.com (1)