Drift Protocol announced Tuesday the implementation of a restoration plan for customers affected by a $295 million exploit on April 1, which it attributed to the North Korea state-backed DPRK hacking group recognized by forensic agency Mandiant.
The assault led the protocol to droop buying and selling and borrowing instantly after the exploit. Drift mentioned “nearly all of stolen property stay traceable and contained with restricted profitable off-ramping by the attacker,” with about 130,259 ETH (roughly $31 million) concentrated throughout 4 monitored wallets.
Drift’s assertion explains that the restoration framework facilities on issuing a token representing verified consumer losses. “Every restoration token represents $1 of verified loss,” Drift mentioned, including that holders would be capable of redeem based mostly on the worth of a restoration pool funded over time.
That pool begins with roughly $3.8 million in remaining protocol property and is predicted to develop via alternate income, as much as $127.5 million in assist from Tether tied to efficiency, and as much as $20 million from companions, Drift mentioned. The pool will accrue till it matches complete losses of about $295.4 million, at which level tokens may be redeemed at full worth, it added.
Drift additionally mentioned some funds have already been frozen, together with about $3.36 million in USDC, whereas further property stay delayed in cross-chain transfers. Authorized efforts to grab and reissue funds are ongoing, it mentioned. The protocol additionally launched a public bounty providing 10% of recovered property.
Drift plans to relaunch within the second quarter as a “security-first” alternate with modifications together with new multisig controls, time-locked operations, key rotation and diminished product scope targeted on perpetuals buying and selling.
“The Drift crew is taking thought-about measures to make sure that customers are made complete,” the crew mentioned, including that remaining selections can be topic to governance votes.
Drift’s restoration plan announcement comes per week after Aave said it was spearheading a coordinated DeFi restoration effort to rescue Kelp DAO, the second largest DeFi exploit this yr, which was additionally carried out by North Korean-backed hackers. The so-called Lazarus group drained almost $280 million. On this case, Aave has been in a position to garner span donations, deposits, and credit score traces from throughout the crypto house.
