Illustrative photo for: Solana DeFi exploit losses: $300M hit, cybersecurity firms

Published 2026-04-02

Summary: Reports indicate a major exploit impacting Solana-based DeFi projects, with mentions of a sizable treasury drain. Specific figures from available sources include a $30 million treasury hack tied to Step Finance, while broader claims of $300 million in losses are not independently confirmed in the provided material.

What We Know

  • The Drift project on Solana experienced a significant exploit that drained a large amount of digital assets, as reported by cybersecurity and data analytics firms.
  • Step Finance, another Solana-based DeFi platform, was hacked with treasury wallets drained of around $30 million worth of SOL, according to CoinDesk coverage.
  • CertiK tracing notes a stake authorization shift connected to the Step Finance incident.
  • The Step Finance treasury drain involved approximately 261,854 SOL, per the available text.
  • There is mention of Solana hacking history and security incidents in broader sources, suggesting a pattern of past exploits influencing current risk perceptions.

What’s Still Unclear

  • Whether the overall figure of nearly $300 million in Solana DeFi exploit losses is confirmed or a compilation of multiple incidents remains unclear from the provided material.
  • Whether there are additional affected projects beyond Drift and Step Finance in the same time frame, and the exact totals if so.
  • The current status of remediation efforts, asset recovery, and ongoing investigations is not detailed in the provided excerpts.
  • Details on the timeline and sequence of events for the Drift exploit are not specified here.

Context

Solana has experienced a series of security incidents spanning wallet hacks, treasury drains, and protocol vulnerabilities over the years. Analysts and researchers regularly monitor such incidents to understand patterns, assess risk, and strengthen defense postures across DeFi apps on the network. While some incidents lead to significant financial losses, others prompt security upgrades and improved monitoring practices within the ecosystem.

Why It Matters

Security incidents in DeFi can affect user trust, funding flows, and the perceived reliability of a blockchain ecosystem. They also underscore the ongoing need for robust treasury protections, rigorous code audits, and fast incident response in decentralized finance environments.

What to Watch Next

  • Updates from Step Finance and Drift on post-incident investigations and security mitigations.
  • Official analyses or independent risk assessments clarifying total losses and containment status.
  • Broader Solana security posture developments and any new protections for treasury wallets and stake authorization mechanisms.

FAQ

Q: Is the $300 million loss figure confirmed?
A: Not confirmed in the provided material; higher-level reports cite a large loss but specific totals vary and require corroboration.

Q: Which projects were impacted alongside Drift and Step Finance?
A: The available information highlights Drift and Step Finance; other affected projects are not specified in the provided sources.

Related coverage

Source Transparency

  • This article is based on a short preliminary brief and may not reflect the full details available in ongoing reporting.
  • Source links are provided in the Sources section where available.
  • A limited open-web check was used to clarify key details when possible; unclear items remain clearly marked.

Original brief: Drift, a Solana-based decentralized finance project, suffered a major exploit that drained nearly $300 million in digital assets, according to cybersecurity and data analytics firms…

Sources


Leave a Reply

Discover more from CEAN

Subscribe now to keep reading and get access to the full archive.

Continue reading