Drift Protocol lost $285 million — over 50% of TVL — on April 1, 2026 after a six-month DPRK social engineering operation. Actors posing as a quantitative trading firm deposited $1 million, built trust through conferences and product discussions, then manipulated Security Council members into signing transactions transferring admin control to an attacker-controlled Solana address. Attribution: UNC4736 (TraderTraitor), medium confidence. Post-mortem: https://rekt.news/drift-protocol-rekt