[Drift: April 1 Attack Was a Long-Term Infiltration Operation Planned by North Korean Hacker Group] Odaily Planet Daily News – Drift Protocol posted on the X platform stating that preliminary investigations into the April 1, 2026 attack indicate that the operation was orchestrated by the North Korean government-backed hacker group UNC4736 (also known as AppleJeus or Citrine Sleet). Since the fall of 2025, the group engaged in six months of face-to-face interactions with Drift contributors by sending intermediaries to attend crypto conferences and establishing fake quantitative trading companies, thereby inducing them to download malicious code libraries or applications. Drift has now frozen all protocol functionalities and moved compromised wallets out of multisignature. Mandiant has been invited to participate in an in-depth forensic investigation. The investigation confirmed that the on-chain funds used to test this operation can be traced back to the Radiant Capital attackers in October 2024.