Drift Protocol, a decentralized cryptocurrency exchange, has confirmed it was the victim of a significant cyberattack, resulting in the theft of approximately $280 million in tokens. The attack, described as highly sophisticated, involved hackers exploiting vulnerabilities in the protocol's governance system, particularly through the misuse of durable nonces and social engineering tactics. On April 1, 2026, Drift announced the attack on social media, emphasizing that it was not an April Fools' joke. All deposits and withdrawals have been suspended as the platform coordinates with security firms to mitigate the damage. This incident represents one of the largest crypto heists to date in 2026. While no one has claimed responsibility, North Korean state-sponsored groups, known for targeting cryptocurrency platforms, are often implicated in such high-profile thefts. The attack has raised concerns about the security measures in place for decentralized exchanges and the potential for future incidents.