Onchain data shows more than a dozen asset types drained from the Solana perp DEX’s main vault address in a rapid burst of transactions.
Solana-based perpetuals exchange Drift Protocol has suffered a series of large-scale outflows, with roughly $270 million in assets moving from the protocol’s vault address in a matter of minutes.
The transfers spanned more than 15 distinct token types — including stablecoins, wrapped Bitcoin variants, liquid staking tokens, Jupiter’s JLP vault token, and even memecoins — all originating from an address Arkham labels as “Drift Protocol: Vault (JCNCM),” which corresponds to Drift’s documentation.
The vault’s holdings have fallen from $309 million to just $41 million.
“We are observing unusual activity on the protocol. We are currently investigating,” the team wrote on X.
Suspicious Transactions
The bulk of the assets landed at a single receiving address that does not carry a known-entity label on Arkham, raising additional questions about the nature of the transfers. A separate transfer of 125,000 WSOL ($10.45M) was routed to yet another unlabeled address.
The largest individual transfers include:
- 41.721M JLP worth $155.62M
- 51.616M USDC worth $51.62M
- 164.349 cbBTC worth $11.29M
- 125K WSOL worth $10.45M
- 8M USDC worth $8M
- 2,201 WETH worth $4.69M
- 45,292 dSOL worth $4.47M
- 63.467 WBTC worth $4.36M
Smaller transfers included MSOL, BSOL, INF, JitoSOL, USDT (across multiple transactions totaling ~$5.65M), 23.366M FARTCOIN ($4.11M) and 2.865M SYRUPUSDC ($3.32M).
The breadth of the asset types is consistent with a comprehensive draining of all deposited collateral, rather than a targeted withdrawal of a single asset class.
Blockchain analyst Lookonchain reports that the exploiter is swapping the stolen assets into ETH.
Drift’s total value locked (TVL) stood at approximately $550 million according to DefiLlama at the time the transfers were flagged, implying that nearly half of the protocol’s TVL moved in a single burst.
At the time of writing, security researchers have yet to publish an independent analysis confirming an exploit.
However, the speed, breadth, scale of the outflows, and the movement of funds to an unlabeled address fit the pattern of a vault drain — a scenario Drift’s own 2022 v1 post-mortem described in detail, where unchecked withdrawals and leverage allowed an attacker to extract all vault funds in a single transaction.
The DRIFT governance token is trading at approximately $0.06, after briefly plunging as low as $0.045, according to CoinGecko.
This is a developing story. We will update this article as more information becomes available.
