Drift Protocol said that its insurance fund was not affected by the latest attack and that users who staked with the fund will be able to withdraw their shares normally once the protocol is brought back online.
summary
- Drift said the insurance fund was not affected because the protocol was paused before liquidation or bankruptcy losses were finalized.
- Users who have shares in the insurance fund will be able to withdraw their shares after the platform recovers.
- The protocol said its insurance fund assets will help support restart and user recovery efforts.
Drift said in an official post on X Users who have contributed to the insurance fund will be able to withdraw their corresponding shares once the protocol is restored. The fund itself was not affected by the attack because Drift was temporarily halted before any losses were completed through “normal liquidation or bankruptcy processes,” the protocol added.
This distinction is important because Drift’s own documentation defines insurance fund As a first support to maintain exchange solvency in the event of bankruptcy. More detailed Documentation of cadastral signature It says users can cancel their stakes from the fund, although withdrawals are subject to a 13-day cooling-off period.
The update follows one of the biggest Solana DeFi abuses Of the year. In April, crypto.news reported that Drift penetration About $285 million was drained through a compromised administrator key in what security researchers described as a social engineering attack rather than a smart contract flaw.
Why was the fund saved?
The explanation for the drift is clear and straightforward: the insurance mechanism exists to absorb insolvencies resulting from liquidations and bankruptcies, and not to retroactively cover external exploitation that was stopped before the end of internal loss paths. In its latest statement, the team said that because the protocol was paused early enough, the insurance fund never became part of the chain of losses associated with the vulnerability.
This is consistent with external reports of the incident. elliptical The value of the exploitation was estimated at $286 million and Drift said hanging Deposits and withdrawals during the attack, while String analysis The breach was described as a compromise to privileged access that resulted in approximately $285 million in losses in a matter of minutes.
The protocol had already indicated that the box had been secured as a precaution. Report from Binance Drift was quoted as saying that the insurance fund’s assets were not affected and were withdrawn to enhance protection after the exploitation.
Recovery and reboot plan
Drift now says that assets from the protocol’s insurance fund will be used to support system reboots and broader user recovery, and that it plans to publish the relevant addresses on-chain so the community can track how the funds are being used. This represents a noticeable shift from merely encircling the fund towards actively deploying part of it in the recovery process.
The insurance fund is just one part of Drift’s broader rebuilding efforts. In April, several outlets reported that the protocol had allocated up to $147.5 million to support affected users, including up to $127.5 million from Tether and another $20 million from partners, while subsequent recovery plans cited recovery tokens tied to verified losses, as covered by CoinMarketCap and RootData.
For users, the immediate consequence is narrower and more significant: the insurance fund stakes in the exploit have not been erased, and normal withdrawals are expected to resume after the Drift recovery process is completed.
