Drift says $270M was siphoned in a six‑month sting that allegedly involved North Korean intelligence operatives posing as a quant firm

What happened

Drift disclosed that roughly $270 million was drained in a carefully staged exploit, and it has been reported that the operation unfolded over more than six months. Allegedly, attackers posed as a quantitative trading firm, cultivated trust with in‑person meetings and even made an initial deposit of more than $1 million to establish credibility. Slow, patient, and seemingly professional — not the smash‑and‑grab most imagine when they think of crypto heists.

The long con

Security investigators say the pattern looks deliberate: long reconnaissance, relationship‑building, then a coordinated extraction. It has been reported that the group studied Drift’s systems closely before striking. The allegation that North Korean intelligence is behind the campaign raises the stakes — if true, this isn’t just organised crime chasing profit; it’s a state‑grade hybrid operation blending espionage, financial theft, and social engineering.

Why it stings

There’s an emotional sting here: protocols and code can be audited, but trust is fragile. How do you vet a supposedly reputable counterparty who sits across the table? The episode underscores a broader industry problem — DeFi’s openness makes it a tempting playground for sophisticated actors who mix on‑chain exploits with old‑fashioned human manipulation. Analysts say this follows a worrying trend of nation‑linked groups targeting digital‑asset markets, though attribution often remains murky.

What’s next

Drift says it’s working with security partners and investigators to trace funds and shore up defenses. Expect renewed calls for tighter operational security, better vetting of counterparties, and more cooperation between crypto firms and law enforcement. If the allegations about state involvement hold up, regulators and policymakers will have even less patience for treating this as “just another hack.” Trust, as ever, will be the currency that’s hardest to regain.

Sources: coindesk.com