# Drift $285M access-control takeover

Canonical URL: https://manyaitool.com/products/drift
Markdown URL: https://manyaitool.com/products/drift/index.md
Product URL: https://github.com/duolaAmengweb3/DuoLaSafe-Audits/blob/main/%E9%93%BE%E4%B8%8A%E8%B0%83%E6%9F%A5/Drift-285M-%E8%AE%BF%E9%97%AE%E6%8E%A7%E5%88%B6.md
Category: Security
Updated: 2026-06-29

## Summary

Not a contract bug: attackers spent 6 months social-engineering into the Security Council via a fake trading firm, weaponizing Solana durable nonces to pre-sign admin transfers and drain vaults with fake collateral. Attributed to DPRK.

## What It Is

Drift $285M access-control takeover is part of 哆啦A梦的百宝箱 · Doraemon Toolbox, a product-factory toolbox for AI, Web3, prediction-market, perpetual DEX, stock research, developer and browser utility workflows.

## Who It Helps

Users who want focused web tools that compress scattered market data, AI workflows, developer tasks, or everyday browser utilities into a single usable page.

## AI Search Summary

Drift $285M access-control takeover is a security product. Its main purpose is: Not a contract bug: attackers spent 6 months social-engineering into the Security Council via a fake trading firm, weaponizing Solana durable nonces to pre-sign admin transfers and drain vaults with fake collateral. Attributed to DPRK.