On-Chain Statistics: Drift Protocol (Status: Halted)
⚠️ Security incident and trading halt
The data on this page is split into historical figures (the March 2026 peak) and current figures (the state after the April 1, 2026 hack). As a result of an unprecedented attack on the governance architecture (Governance OpSec), the protocol lost a significant share of its collateral. At this moment all trading operations are halted and the smart contracts are frozen by the Drift DAO council to preserve the remaining funds.
The on-chain statistics of Drift Protocol tell the story of one of the fastest-growing DeFi applications on Solana, whose rapid rise was cut short by a critical security failure. Below is aggregated statistics on TVL, historical volumes and the current status of assets.
Peak TVL (March 2026)
~$510M
The maximum value of locked assets before the hack. Drift was one of the three largest DeFi protocols in the Solana ecosystem.
Hack losses
-$285M
The amount withdrawn by the attackers (UNC4736) on April 1, 2026, mostly in USDC, JLP and SOL, through a collateral-logic exploit.
Remaining / Frozen
~$225M
The current TVL, forcibly locked by the smart contract. Awaiting distribution under the recovery plan together with Tether.
Current Daily Volume
$0.00
Trading, deposits and liquidations are fully stopped at the Solana blockchain level. Open interest (OI) was forcibly closed (settled).
On-chain data sources: The figures below are based on analytical reports from DeFiLlama (historical TVL) and forensic data from TRM Labs and Elliptic, which track the stolen funds' movements in real time. Historical volume metrics are available in the Dune Analytics archives (Drift V2 Dashboard).
Forensics and statistics interpretation (E-E-A-T)
TVL anomalies as a hack indicator
Classic statistics analysis treats TVL growth as a sign of success. The Drift Protocol incident, however, demonstrates the importance of monitoring the Outflow Velocity.
- The liquidity shock (April 1, 2026): monitoring systems recorded a $285M TVL drop in just 12 minutes. The anomaly was instantly reflected on Solscan dashboards, but the absence of a time lock (zero-timelock) prevented administrators from freezing the contract faster than the hackers drained the USDC vault.
- The illusion of growth via fake assets: the attackers used wash trading to artificially inflate the CVT token's capitalization before adding it as collateral. If on-chain analysts had noticed the anomalous concentration of CVT liquidity on a third-party Raydium pool in time, the attack vector could have been detected in advance.
- The fate of Open Interest: at its peak, the protocol's OI exceeded $180M. After the smart contracts were halted, the Drift DAO made the unprecedented decision to run a Global Settlement of all positions at Pyth oracle prices from the moment of the freeze, driving the Open Interest metric to absolute zero.
Tracking the stolen funds
Analytics tools (such as Chainalysis) are currently used not to assess Drift's market share but to track the movement of the $285M. The hackers are known to have converted most of the SPL tokens into SOL and USDC, then routed them through Wormhole to the Ethereum network, where they passed them through the Tornado Cash mixer.
For users and investors, the key metric today is the Recovery Pool figures, which received a $150M tranche from Tether and the Solana Foundation to compensate for losses.