Drift crypto platform confirms $280 million stolen in hack as researchers point finger at North Korea

2026-04-02T20:51:52Zf9da7153c478e88cdf8308976992eca2018e7d767ea229c9328392af1bca375a
DeFiDriftFrance social media billNorth KoreaSIOWhatsAppadministrative takeovercrypto theftcryptocurrencyiOSpolicyprivilege escalationspywarestate‑linked actorsupply chainthird‑party breach

What happened

Multiple security and policy developments: Drift, a DeFi crypto platform, confirmed a major security incident in which approximately $280M was stolen after attackers executed a “novel” rapid takeover of the platform’s security council administrative powers; researchers and reporting point to North Korean-linked actors and Drift suspended services pending investigation. Separately, WhatsApp warned of a malicious fake iPhone app used to distribute SIO-family spyware, primarily impacting users in Italy. Nissan reported that stolen data originated from a third‑party vendor’s file-transfer system (

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
therecord_media
Record identifier
f9da7153c478e88cdf8308976992eca2018e7d767ea229c9328392af1bca375a
Enrichment time
2026-04-02T20:51:52Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.