According to Wu Blockchain, Cyvers Alerts has disclosed that the $280M theft from Drift Protocol was the result of a long-term social engineering attack by North Korean (DPRK) hackers, rather than a contract vulnerability. Starting on March 23, the attackers set up persistent random number accounts and compromised signers, ultimately exploiting the project's fatal weakness of a 2/5 multisig with no time lock in just a few minutes on April 1. They gained admin privileges and removed withdrawal restrictions. Drift is currently attempting to negotiate by leaving messages on-chain. The ripple effects of this incident have already impacted over 20 Solana protocols. https://(wublock123.com)/news/cyvers-drift-280m-heist-north-korean-long-term-social-engineering-59077