Drift discloses attack details, multi-signature was compromised and used to execute attacks through pre-signed transactions

ME News Report, April 2nd (UTC+8), Drift Protocol disclosed that during this security incident, the attack began with a test withdrawal transaction initiated from the insurance fund. About one minute later, the attacker took over administrator privileges and carried out subsequent operations through two pre-signed durable nonce transactions. The project team stated that this attack was caused by multiple factors, including the delayed execution of pre-signed transactions, the compromise of multi-signature approval, or related to targeted social engineering attacks or transaction misdirection. Drift is currently cooperating with multiple security agencies to investigate the cause and working with cross-chain bridges, exchanges, and law enforcement to trace and freeze related funds. A detailed post-incident report will be released later. (Source: ChainCatcher)