North Korean Actors Suspected Behind $280M Drift Protocol Hack, Raising Calls for Improved Operational Security in DeFi Industry.

Ledger CTO Charles Guillemet suspects North Korean-linked attackers behind the $280 million Drift Protocol hack on Solana. The exploit targeted multisig signers using social engineering, making it the largest DeFi hack of 2026. Guillemet believes that the compromise of 2-of-5 multisig signers weeks prior enabled the hack, and the incident highlights the need for stronger operational security governance across the DeFi industry.