The Drift team just released their internal investigation results regarding the theft. Not gonna read the long essay, but to sum it up: they’re blaming North Korea 朝鲜. Looks like Kim just scored another $200M in foreign currency—wonder what kind of mischief they'll cook up next. Honestly, I think the first thing they should reflect on and address is why the security of treasury funds in a decentralized blockchain project can be concentrated in the hands of just a few people. Whether it’s succumbing to temptation and embezzling funds or falling victim to a single-point social engineering attack, this is an extremely dangerous way to manage funds. If this is what Defi is, then replacing traditional finance is just a pipe dream . ～～～～～～～ • Drift is collaborating with law enforcement, forensic partners, and ecosystem teams to investigate the attack that occurred on April 1, 2026. • This was a meticulously planned intelligence operation, prepared over six months, and executed through targeted engagements and infiltration at multiple crypto industry conferences. • The attackers posed as a quantitative trading firm, built trust with relevant personnel, gained access to an Ecosystem Vault holding over $1M, and maintained interaction with contributors via offline meetings and Telegram. • Potential attack vectors include: cloning a malicious code repository, downloading a TestFlight wallet app, and exploiting vulnerabilities in VSCode to silently execute malicious code. • Based on on-chain data and analysis of operational methods, there is currently medium-to-high confidence that this attack was carried out by a North Korean state-backed organization linked to the Radiant Capital hack.