The scope of a significant security incident involving the Drift protocol on the Solana blockchain has expanded substantially, now affecting a total of 20 decentralized finance (DeFi) projects. According to the latest data from SolanaFloor, the number of compromised protocols nearly doubled over a 24-hour period, rising from 11 to 20 as developers and security analysts continue to assess the fallout. This breach highlights systemic risks within interconnected liquidity and derivative layers on the network.
Expanding List of Affected Solana Protocols
The investigation into the Drift vulnerability has identified nine additional entities impacted by the exploit. The newly listed protocols include PiggyBank, Perena, Vectis, Valeo, Amp Pay, Loopscale, Prime Numbers Fi, Gauntlet, and Exponent. These projects represent a diverse cross-section of the Solana ecosystem, ranging from yield optimizers to risk management frameworks.
- Prime Numbers Fi: Estimated losses exceeding $1 million.
- Gauntlet: Approximately $1.4 million in affected assets.
- Neutral Trade: Estimated impact of $0.67 million.
- Reflect Money: Reported losses of $0.95 million.
- Elemental DeFi: Approximately $0.9 million affected.
Financial Impact and Technical Assessment
While the full extent of the capital loss is still being audited, early reports suggest that millions of dollars in digital assets have been compromised across the various integrations. Other notable projects reporting losses include Vectis with $0.69 million and Ranger, among others. The vulnerability appears to stem from the way secondary protocols interact with Drift's core smart contracts or liquidity pools, leading to a ripple effect throughout the ecosystem.
"The scope of the Drift protocol vulnerability incident continues to expand. The number of affected protocols has increased from 11 yesterday to 20", stated the report from SolanaFloor, emphasizing the ongoing nature of the discovery process.
As of April 3, 2026, security teams are working to patch the underlying vulnerability and prevent further unauthorized withdrawals. Users are advised to monitor official announcements from the affected projects and exercise caution when interacting with linked smart contracts. This incident serves as a critical reminder of the complexities inherent in composability within DeFi, where a single point of failure can jeopardize multiple platforms simultaneously.
Frequently Asked Questions
Quick answers to the most common questions about this topic.