04-03-2026, 06:45 AM
i agree not worth the commitment, one exploit and everything's gone. apparently 2/5 multi sigs approved the transactions via durable nonces which granted the actor pre signed admin transfers. the 2/5 drift multisig signers thought they were signing a routine transaction and described them as "misrepresented transaction approvals". they granted authorization not once, but twice about a week apart. no bug exploit, no private keys, a legitimate solana transactional feature lead to drift's loss.