Solana-based decentralized exchange (DEX) Drift Protocol has shared the highly anticipated user recovery plan alongside Tether and other collaborators. This move follows the major exploit that drained $285 million from the project’s vaults two weeks ago.
Drift Protocol Secures $150M Recovery Fund
On Thursday, Drift Protocol, the largest decentralized perpetual futures exchange on the Solana blockchain, announced a collaboration with Tether and other partners to establish a “structured recovery plan backed by up to nearly $150 million in combined support” and relaunch with USDT “at the center.”
According to the announcement , the funds include a $100 million revenue-linked credit line, an ecosystem grant, and loans to market makers, all intended to finance a dedicated user recovery pool.
As NewsBTC reported , the Solana-based DEX suffered an exploit that stole hundreds of millions of dollars from its vaults on April 1. The attack took around $285 million in multiple crypto assets and became the largest exploit of 2026 to date.
During the initial phase of the collaboration, a significant portion of exchange revenue, together with committed support capital, will be intended to fund this recovery pool, Drift explained, noting that any stolen funds recovered would be contributed to the pool.
In addition, Drift revealed that it will issue a new token for the affected users to “streamline distribution of recovery assets as well as provide liquidity opportunities for impacted users.”
The token will be a dedicated recovery token, separate from the DRIFT governance token, that is intended to represent a claim on the recovery pool and will be transferable.
Solana DEX Eyes Hardened Security Framework
The Solana-based project shared that it will harden its security, passing each component through independent audits by OtterSec and Asymmetric Research before relaunching the protocol.
It will also introduce a new community-governed multisig to manage core protocol assets, requiring all multisig signers to operate on dedicated signing devices with transaction content independently verified outside the primary signing interface before any signature is executed.
This aims to prevent similar attacks on the project. It’s worth noting that the malicious actors gained unauthorized access to Drift Protocol by manipulating its multisig approvals using Solana durable nonces.
“The attack involved unauthorized or misrepresented transaction approvals obtained prior to execution, likely facilitated through durable nonce mechanisms and sophisticated social engineering,” the project explained on its first report.
Since then, Blockchain analytics firm Elliptic has identified multiple indicators suggesting that the exploit is linked to the Democratic People’s Republic of Korea (DPRK), while Drift has affirmed that the exploit was a six-month operation to infiltrate the protocol’s inner circle and compromise their devices.
USDT Settlements ‘At The Center’ Of DriftThe project also detailed that it will relaunch with Tether’s USDT for settlements. Tether reportedly proposed to extend a USDT support facility to designated market makers “to reinforce deep, liquid markets from day one.”
“Drift’s decision to integrate USD₮ into the relaunch and recovery of a major trading venue on Solana reinforces Tether’s role as a reliable settlement asset within the Solana ecosystem,” Tether stated .
The shift from USDC to USDT settlement represents a significant change, following Circle’s decision not to freeze the stolen USDC during the initial attack.
Notably, the exploiter swapped $270.9 million of the stolen assets into USDC within hours, bridged them from Solana to Ethereum via the CCTP TokenMessengerMinterV2, and purchased 129,000 ETH, splitting them across multiple wallets.
At the time, multiple investors and on-chain investigators urged Circle to freeze the funds, with crypto sleuth ZachXBT slamming the stablecoin issuer for its repeated “inaction” over the past few years. Circle has since addressed the backlash, affirming that it does not act “unilaterally or arbitrarily” and freeze funds when “the law requires us to act.”
Drift concluded that “this is the first step toward making users whole over time and toward building back stronger than where we were before.”
