The attacker manufactured a token called CarbonVote with a few thousand dollars in seeded liquidity and wash trading. Drift’s oracles treated it as legitimate collateral worth hundreds of millions of dollars. Thirty-one rapid withdrawals later, $285 million in real user assets was gone. The entire operation took under twenty minutes. North Korea probably did it. … Continue reading $285 Million Gone. North Korea Pulled the Trigger. Drift Loaded the Gun