Breaking: Ledger CTO Says Drift Exploit Mirrors DPRK-Linked Bybit Hack Tactics
Ledger CTO Charles Guillemet (@P3b7_) says the recent Drift Protocol exploit used the same playbook as last year's Bybit hack, which has been widely attributed to DPRK-linked actors. According to Guillemet, the attackers did not take advantage of a single smart-contract bug. Instead, they quietly compromised the computers of multisig signers over time and manipulated them into approving a malicious transaction. "The signers may have believed they were signing a legitimate operation," he warned, adding that the codebase appeared clean while the human layer lacked protection.