$300M, 8 days of lurking, one attack. The hacker didn’t break any smart contracts—they simply took the admin keys. Social engineering attack, multisig vulnerabilities, zero time lock—every layer of Drift’s defenses was laid bare in this attack. After succeeding, the hacker took less than half a day to cash out, bridge across chains, and disappear. On-chain tracking is almost completely ineffective.