Drift says $270 million exploit was a six-month North Korean intelligence operation

Drift exchange suffered a $270 million exploit orchestrated by North Korean intelligence operatives who conducted a sophisticated six-month social engineering campaign. The attackers posed as a legitimate trading firm, met Drift team members in person across multiple countries, and deposited $1 million of their own funds to establish credibility before executing the massive drain.

• →North Korean intelligence conducted a six-month long-term operation to exploit Drift exchange for $270 million.
• →Attackers used sophisticated social engineering by posing as a trading firm and meeting Drift contributors in person.
• →The operation involved depositing $1 million of the attackers' own capital to establish legitimacy and trust.
• →The exploit demonstrates the increasing sophistication of state-sponsored cryptocurrency attacks.
• →Physical meetings across multiple countries were used as part of the elaborate deception strategy.