Drift Insurance Fund Untouched, Withdrawals to Resume After $285M Hack

Drift says insurance fund untouched after attack, withdrawals to resume

Drift Protocol confirmed that the recent attack didn’t impact its insurance fund. Users who have staked funds will be able to withdraw them as usual when the protocol is restored.

Summary

  • Drift said the insurance fund was not impacted because the protocol was paused before liquidation or bankruptcy losses were finalized.
  • Users with insurance fund stakes will be able to withdraw their shares after the platform recovers.
  • The protocol said its own insurance fund assets will help support a restart and user recovery effort.

Drift announced on X (formerly Twitter) that users who deposited funds into the Insurance Fund will be able to withdraw them once the system is back online. The company also stated that the attack didn’t impact the fund itself because Drift was temporarily paused, preventing any losses through standard liquidation or bankruptcy procedures.

This difference is important because Drift’s official guides state the Insurance Fund is the primary safety net to keep the platform running smoothly if companies fail. Further details explain users can remove their funds from the Insurance Fund, but they must wait 13 days before the withdrawal is completed.

As a researcher following the Solana ecosystem, I’ve been tracking the fallout from a major DeFi breach earlier this year. Back in April, crypto.news reported that Drift was hacked for around $285 million. What’s interesting is that security experts believe this wasn’t a technical flaw in the smart contract itself, but rather a social engineering attack where an administrator’s key was compromised.

Why the fund was spared

Drift explains that the insurance fund is designed to protect against losses from bankruptcies or project failures, not to cover losses from attacks that were stopped before they could fully cause damage. According to their recent statement, the protocol was paused quickly enough that the insurance fund didn’t need to cover the losses caused by the security vulnerability.

Reports from other sources confirm these details. Elliptic calculated the financial impact of the incident at $286 million, noting that Drift paused deposits and withdrawals as it happened. Chainalysis explained the attack was a result of unauthorized access, leading to approximately $285 million in losses within minutes.

The system had previously indicated the funds were being protected as a safety measure. According to Binance, Drift stated that the insurance fund’s assets were safe and were being moved to further strengthen security following the incident.

Recovery and restart plan

Drift now states that funds from its Insurance Fund will be used to help restart the system and compensate users. They plan to publicly share the details of these transactions on the blockchain so everyone can monitor how the funds are being used. This is a change from their previous plan of just keeping the Insurance Fund separate, and now involves actively using it to aid in recovery.

Drift’s plan to recover from recent issues involves more than just an insurance fund. Reports in April indicated a total of $147.5 million in support for users affected, with $127.5 million coming from Tether and an additional $20 million from other partners. Later plans included the use of recovery tokens to compensate users for confirmed losses, as detailed by CoinMarketCap and RootData.

The good news for users is that the recent security issue didn’t affect the funds held for insurance, and regular withdrawals should be possible again once Drift finishes its recovery work.

Read More

2026-05-20 20:04