Drift Secures $147.5M, Replaces USDC With USDT in April 2026

Drift Protocol secured up to $147.5 million from Tether and partner backers after attackers began draining about $285 million from the Solana-based exchange at roughly 16:05 UTC on April 1, 2026. The recovery plan shifts Drift from USDC to USDT at relaunch, tying fresh capital, new governance controls, and a recovery token to a broader restart after the year’s largest DeFi exploit.

Stay ahead of stories like this with Web Snack - a daily crypto market briefing covering the moves, numbers, and signals that matter before the market fully reacts.

Context

The breach ranks as the largest DeFi exploit of 2026 and the second-largest security failure in Solana’s history. Investigators linked the attack to a North Korean campaign that relied on social engineering, pre-signed authorizations, and governance weaknesses rather than a standard smart contract bug.

The operation unfolded over months. The attackers reportedly posed as a legitimate quantitative trading firm, prepared durable nonce accounts, and exploited a Security Council setup that had moved to a 2-of-5 threshold with no timelock shortly before the exploit.

The market reaction was immediate. Drift’s total value locked fell from $550.13 million to about $255.15 million on April 1, a decline of $294.98 million, or 53.62%, as users withdrew capital and risk was repriced across the platform.

Details

The funding package is precise, even if some headlines rounded it up. Official announcements describe up to $127.5 million from Tether and up to $20 million from partners, for a total of $147.5 million, while some outlets summarized that as $148 million or nearly $150 million.

Drift said the relaunch will move its core settlement layer from USDC to USDT and support more than 128,000 users and over 35 ecosystem teams. The structure also includes a $100 million revenue-linked credit facility, plus ecosystem grants and market-maker loans, which means the recovery is not a full upfront cash reimbursement and still depends on future exchange activity.

The attack itself was fast once the final trigger was pulled. Investigators said the exploiter gained privileged access and executed 31 withdrawal transactions in roughly 12 minutes, draining USDC, JLP, and other assets from protocol-controlled accounts.

Two statements capture the stablecoin dispute that followed. “Circle freezes USDC only when legally required to do so, and it is not a unilateral decision,” said Dante Disparte, Chief Strategy Officer at Circle, on April 9 as the company defended its response.

“More than ten additional DeFi protocols within the Solana ecosystem were indirectly affected,” said ZachXBT, on-chain investigator, in reporting published on April 3, widening the incident from a single-protocol failure to a broader liquidity event across Solana DeFi.

Impact

The USDC-to-USDT switch matters because it turns a treasury decision into a public signal about stablecoin risk management. More than $232 million in USDC was reportedly bridged from Solana to Ethereum across more than 100 transactions over roughly six hours during the laundering window without any freeze action from Circle.

The damage also hit Drift’s token hard. DRIFT fell from roughly $0.064 around the exploit to an all-time low of $0.02668 on April 10, leaving it down more than 98% from its November 2024 high near $2.60 to $2.65, before recovering into the roughly $0.043 to $0.050 range on April 16.

That leaves a clear gap between losses and support. Drift’s official update put total user losses at $295 million, so even the full $147.5 million package covers only part of the shortfall and leaves the rest dependent on relaunch performance, trading revenue, recoveries, and future distribution mechanics.

Next Steps

Drift said it will not relaunch until two external reviews are complete. OtterSec is handling the redesigned codebase review, while Asymmetric Research is focused on operational security and governance controls.

The protocol also plans to disable durable nonces, enforce timelocks on administrative actions, move core assets under a new community-governed multisig, and keep working with law enforcement and blockchain forensics firms. A separate transferable recovery token is planned for affected users, with any recovered funds expected to flow back into the recovery pool.

For now, the sequence is straightforward: complete audits, relaunch with USDT, distribute recovery tokens, and rebuild liquidity. Whether that path is enough to restore trust will depend less on the headline funding number than on execution after restart.

Want the bigger market picture behind headlines like Drift? Subscribe to Web Snack for a daily crypto briefing with sharp analysis, key charts, and the signals worth watching.

P.S. This article is for informational purposes only and does not constitute investment advice. Always conduct your own research and make independent decisions.