Fraudulent Cryptocurrency App in Mac App Store Stole $9.5 Million From 50-Some Users

Drift Protocol, a Solana-based DeFi exchange, was exploited for $285 million through a novel attack involving durable nonces and social engineering attributed to North Korean hackers. The attackers gained administrative access and disabled risk management safeguards before converting tokens to USDC then ETH. Circle, USDC's issuer, did not freeze the stolen funds during a six-hour window, raising questions about centralized stablecoin governance.