How a Solana feature designed for convenience let attackers drain more than $270 million from Drift

Drift Protocol has suffered a significant loss of at least $270 million due to an exploit that did not involve traditional hacking methods like code bugs or private key breaches. Instead, the attacker utilized Solana's legitimate 'durable nonces' feature to trick the protocol's security council into pre-approving administrative transfers weeks in advance, ultimately bypassing multisig security and draining funds in under a minute.

Understanding Durable Nonces

Solana transactions typically require a recent blockhash, which expires within 60-90 seconds, preventing old transactions from being replayed. 'Durable nonces' override this by using a fixed, on-chain nonce that keeps transactions valid indefinitely until submitted. This feature is designed for legitimate use cases such as hardware wallets and offline signing, allowing for transaction preparation without immediate submission. However, it creates a vulnerability where a pre-approved transaction can be executed at a much later time, with no recourse for the signer unless the nonce account is manually managed.

Attack Execution Timeline

The attacker exploited Drift's 'Security Council multisig,' which requires at least two out of five members to approve actions. The attacker did not compromise any private keys but instead obtained signatures for transactions that were then locked into durable nonces. On March 23, four durable nonce accounts were created, two linked to council members and two controlled by the attacker. Following a planned Security Council migration on March 27, the attacker re-established the required approval threshold by March 30. On April 1, the attacker executed the exploit. After a legitimate test withdrawal from the insurance fund, the attacker submitted the pre-signed durable nonce transactions, which were used to approve and execute a malicious admin transfer, granting them control over protocol permissions and enabling the draining of vaults.

Assets Drained and Fund Flows

Onchain researchers tracked approximately $270 million in stolen assets across numerous tokens. The largest portions included $155.6 million in JPL tokens and $60.4 million in USDC, along with significant amounts of CBBTC, USDT, wrapped ether, DSOL, WBTC, and FARTCOIN, among others. The primary drainer wallet was funded eight days prior to the attack. Stolen funds were moved to intermediary wallets, then transferred to Ethereum via the Wormhole bridge. These Ethereum addresses were pre-funded using Tornado Cash, a sanctioned privacy mixer. Notably, over $230 million in USDC was bridged from Solana to Ethereum using Circle's CCTP, with criticism directed at Circle for not freezing the funds promptly.

Compromised and Unaffected Assets

The exploit primarily targeted the human element surrounding the multisig, exploiting the time gap between transaction approval and execution enabled by durable nonces. All deposits into Drift's borrow-and-lend products, vault deposits, and trading funds were affected. However, DSOL tokens not deposited in Drift, including staked assets, remain unaffected. Insurance fund assets are being secured, the protocol is frozen, and the compromised wallet has been removed from the multisig. This incident marks the third major exploit in recent months that did not stem from a code vulnerability, highlighting a growing trend of social engineering and operational security failures in DeFi exploits.