web3 / news / / Gizmodo
The team behind Drift provided an update on a hack of the project that occurred on April 1.
The Drift hack was attributed to a six-month operation by North Korean state-linked actors.
KEY POINTS
- Attackers exploited Drift's new approval system, which removed waiting periods and required only two signatures.
- Hackers created 750 million fake CarbonVote Tokens to manipulate collateral and drain $285 million in assets.
- Private key compromise vectors included a VSCode vulnerability and a malicious TestFlight app download.
- In-person intermediaries, not North Korean nationals, facilitated the operation, matching DPRK tradecraft.
COMPANIES
Summarized by Newsio from Gizmodo. How we summarize →