USDC (USDC)

Two transactions, $285M gone.

The @DriftProtocol exploit isn’t just another hack story rather it’s a clear example of how design flaws can break even well-audited systems.

On April 1, 2026 (16:05 UTC), Drift one of @solana top perpetual DEXs was exploited.

Before the attack:
• TVL ≈ $309M

After:
• ~$285M drained

Almost the entire system was wiped in hours.

Important detail:
Not a smart contract bug, no code failure, no mnemonic leak, this was a privileged access failure.

That shift alone changes how we should think about risk in DeFi.

The attacker didn’t “hack” the protocol in the traditional sense. They became the admin.

Once that happened, everything else followed naturally.

➤ Step 1: Preparation

The attacker created a token:
→ CVT (CarbonVote Token)

Key data:
• ~750M total supply
• >80% controlled by attacker
• ~$500 liquidity on Raydium
In reality: worthless.

➤ Step 2: Fake value

Drift allows admins to assign oracle sources.

The attacker:
→ Created a custom Switchboard oracle
→ Set CVT pric

People throw around the word “liquidity” like it is some magic thing. “If we get USDC we will have more liquidity” they say. But what does that even mean? Liquidity for what?

Atm it would seem that our 3 main USD stablecoins potentially have different liquidity requirements. USDM for trading, USDCx for on and off ramps, USDA for EMURGO’s partners’ payment solutions.

Where “liquidity” gets directed will depend on demand of those services.