Drift had an event on the 25th of March (http://luma.com/yshbx8q2), the exploiter's first funding transactions came roughly 12 hours before this event started. Guess the issue is OpSec related… Maybe hijacked cameras or some kind of physical intervention took place there. My idea is to double check everything related to this event. Both online and offline vectors.(Vladimir S. | Officer's Notes)