Security Expert Stresses Importance of Auditing Admin Keys After $200 Million Drift Exploit

By Omkar Godbole (All times ET unless indicated otherwise) The SOL token of the programmable blockchain Solana has plummeted to a five-week low following a significant exploit at Drift, one of its largest decentralized exchanges, highlighting that security risks extend beyond smart contracts. Omer Goldberg, founder of Chaos Labs, emphasized the need to audit the admin key's surface area, not just the smart contracts, explaining that the Drift exploit occurred when the attacker compromised the admin key, granting them unrestricted control. According to Goldberg's X thread, the attacker utilized this power to create a fake collateral market for the worthless CVT token, manipulating risk parameters and artificially inflating its value, ultimately draining over $250 million in tokens. This exploit was possible due to Drift's single shared liquidity pool, which holds all users' collateral and trading funds, providing a seamless trading experience but also increasing vulnerability. The issue was not a code bug but rather the massive damage that could be caused by a compromised admin key, which can rewrite protocol-wide risk rules, assign oracles, and disable safety guards. This incident is not isolated, as just 10 days prior, Resolv was drained of $25 million in tokens after attackers compromised a SERVICE_ROLE key, underscoring the importance of strong governance and key controls in protocol safety. In market news, SOL's near 3% drop to $78.30, its lowest since late February, is consistent with the weakness in bitcoin, ether, XRP, and the wider market, as represented by the CoinDesk 20 Index, largely due to President Donald Trump's renewed threat to Iran, which has driven oil prices higher. For more analysis of today's activity in altcoins and derivatives, see Crypto Markets Today. Key events to watch include those listed in CoinDesk's 'Crypto Week Ahead'. Additionally, token events, conferences, and market movements, including bitcoin stats, technical analysis, crypto equities, and ETF flows, are available in the Crypto Week Ahead section. In other news, Trump's vague timeline for Iran has stirred market and political angst, with the $31 trillion U.S. Treasuries market experiencing its worst monthly performance since late 2024 in March, and oil prices surging. Investors have also been selling their bitcoin holdings, leading to an unwinding of the bitcoin treasury boom, which may not be a positive sign for the market.