The Drift Protocol attack was an unconventional hack that didn't involve discovering a bug, cracking a private key, or exploiting a flash loan. Instead, an attacker leveraged a legitimate Solana feature known as 'durable nonces' to deceive Drift's security council into pre-approving transactions that were executed weeks later, in a context the signers hadn't intended. As a result, at least $270 million was drained in under a minute, although the setup took over a week. Durable nonces are a Solana feature designed to override the safety mechanism that prevents old transactions from being replayed.
They replace the expiring blockhash with a fixed 'nonce' stored in a special on-chain account, keeping the transaction valid indefinitely until it is submitted. While this feature is intended for legitimate uses, such as hardware wallets and institutional custody solutions, it creates a problem when transactions become indefinitely valid.
If an attacker can obtain a signature for a transaction today, it can be executed at any point in the future, according to the system's rules, without the signer being able to revoke their approval. The attacker exploited Drift's Security Council multisig system, which requires at least two approvals from five council members.
However, the attacker didn't need to compromise anyone's keys, instead obtaining two signatures through unauthorized or misrepresented transaction approvals. The attacker created durable nonce accounts associated with legitimate council members and their own accounts, allowing them to lock in valid signatures that wouldn't expire. After obtaining the required approvals, the attacker executed the pre-signed transactions, gaining control of Drift's protocol-level permissions and introducing a fraudulent withdrawal mechanism to drain the vaults.
On-chain researchers tracked the stolen funds in real-time, totaling approximately $270 million across various tokens. The primary drainer wallet was funded eight days before the attack and remained inactive until execution day. Stolen funds were transferred to intermediary wallets and eventually moved to Ethereum addresses via a cross-chain bridge.
The attack highlights the dangers of social engineering and operational security failures in DeFi protocols, which are increasingly becoming the primary means of exploiting these systems. The 'durable nonce vector' is particularly concerning, as it exploits a feature that exists for a good reason and is challenging to defend against without fundamentally changing how multisig approvals work on Solana.