Wu Blockchain (@WuBlockchain): Ledger CTO: Drift Attack Method Identical to Bybit Hacking; Attackers Possibly North Korean Hackers

Ledger CTO: Drift Attack Method Identical to Bybit Hacking; Attackers Possibly North Korean Hackers Ledger CTO Charles Guillemet stated that the Drift Protocol hack was not caused by a smart contract vulnerability, but rather by a breach of the protocol's multisig mechanism. The hackers appear to have gained control of the multisig holder's device or stolen enough private keys through long-term infiltration, misleading operators into approving malicious transactions. This attack method is highly similar to the attack on Bybit last year, which was suspected to be linked to the North Korean hacking group (DPRK). A large amount of the lost funds have already been transferred to wallet addresses controlled by the hackers. Guillemet called on the industry to improve endpoint detection capabilities and adopt hardware-supported plaintext signatures to prevent such operational-level security risks. https://x.com/P3b7_/status/2039607161328742746