The $270 million exploit of Drift was not caused by a smart contract bug or code manipulation, but rather a six-month campaign involving fake identities, in-person meetings, and cultivated trust, forcing a broader reckoning across decentralized finance and highlighting the need for a more comprehensive security approach that protects not just the technology, but also the people and processes involved.
