Drift Protocol

Drift Protocol is a decentralized derivatives exchange built on Solana, offering perpetual futures, spot trading, lending, and borrowing under a unified cross-margin account system. Launched in August 2021, it grew to become the largest open-source perpetuals exchange on Solana by cumulative volume. In April 2026, the protocol suffered a $285–295 million exploit attributed to North Korean state-sponsored hackers. The team is rebuilding under the new name Velocity DEX, with a private beta in July 2026 and public relaunch targeted for Q3 2026.

What It Is and the Problem It Solves

Traditional derivatives trading happens on centralized exchanges where users surrender custody of their assets to an intermediary. Drift Protocol was built to replicate the execution quality, market depth, and product breadth of those venues on-chain, giving traders direct control of their funds while benefiting from Solana's high-throughput, low-cost settlement.

The core challenge perpetual futures DEXs face is maintaining reliable liquidity without an established market-maker base. Drift addressed this with a layered liquidity architecture combining three complementary mechanisms rather than depending on any single source.

Core Mechanism

Drift's trading engine rests on three interlocking liquidity layers:

Dynamic AMM (DAMM): Rather than a standard constant-product curve, Drift's AMM uses oracle-pegged virtual reserves that re-center around the current market price. This keeps quotes tight to fair value and ensures a baseline of guaranteed liquidity for every market, regardless of external market-maker activity.

Decentralized Limit Order Book (DLOB): Introduced in Drift v2 (2022), the fully on-chain order book supports limit orders, post-only orders, resting liquidity, and advanced order types including immediate-or-cancel (IOC) and reduce-only. Permissionless keeper bots monitor the book and execute matches, earning fees for doing so.

Just-In-Time (JIT) Liquidity: When a user submits a market order, JIT-enabled market makers compete in a short auction window to fill the order at execution time. This reduces slippage on large trades and tightens effective spreads beyond what a standalone AMM can offer.

Together these layers ensure that even absent external market makers, the DAMM provides fallback liquidity; when market makers are present, JIT and DLOB deliver competitive pricing.

Cross-Margin Account System

A single Drift account functions as a unified risk engine. Deposits earn yield through integrated borrow-lend markets while simultaneously serving as collateral for perpetual futures positions and spot margin trades. Dynamic initial and maintenance margin requirements adjust to each position's risk profile. Using one pool of collateral across multiple strategies improves capital efficiency relative to venues that require siloed margin per market.

Products and Supported Assets

• Perpetual Futures: 50+ markets with up to 101x leverage on SOL, BTC, and ETH contracts.
• Spot Trading: On-chain spot markets for Solana ecosystem tokens.
• Lending and Borrowing (Drift Earn): Deposits earn yield through optimized strategies, with cited yields up to 16% on selected assets.
• Insurance Fund Staking: Depositors backstop bad debt in the insurance fund and earn a share of liquidation and trading fee revenue.
• Drift Institutional: Bespoke credit solutions for institutional-scale capital.

The protocol accepts 100+ SPL tokens as collateral, one of the broadest collateral menus in Solana DeFi. By September 2024, the platform had accumulated over $50 billion in cumulative trading volume and more than 200,000 users.

DRIFT Token and Governance

Drift launched its native governance token, DRIFT, in 2024, managed by the Drift Foundation. Token functions include:

• Governance: Token-weighted voting on fee schedules, market listings, risk parameters, and treasury management.
• Fee discounts: Staked DRIFT (sDRIFT) earns reduced trading fees across all protocol services.
• Revenue sharing: A portion of protocol revenue is distributed to sDRIFT stakers.
• Incentives: Market maker and liquidity provider incentive programs.

Team and History

Drift was founded in 2021 by Cindy Leow, David Lu, and two additional co-founders. Leow, whose background is in investment banking, is the most prominent public figure for the project; Lu brings a venture capital background. The team grew from roughly 25 employees at the Series B to a target of 50.

Funding history:

• Seed through Series A: Total of $28.8 million from Multicoin Capital, Polychain Capital, Blockchain Capital, Primitive Ventures, Folius Ventures, Maelstrom, and others, including Solana co-founders Anatoly Yakovenko and Raj Gokal.
• Series B (September 2024): $25 million led by Multicoin Capital, with participation from Blockchain Capital, Primitive Ventures, and Folius Ventures, bringing total funding to $52.5 million.

Drift v2, released in 2022, introduced the DLOB, JIT liquidity, spot markets, and unified cross-margin — a significant architectural upgrade over the initial vAMM-only design.

Security and Audits

Before the April 2026 exploit, Drift's smart contracts had been audited by Trail of Bits, OtterSec, Neodyme, and Zellic. The protocol also maintained an insurance fund, circuit breakers, oracle deviation guards, and liquidation throttling to contain systemic risk.

The April 2026 Exploit

On April 1, 2026, attackers drained approximately $285–295 million from Drift Protocol's vaults in roughly 12 minutes. Forensic firms Mandiant and TRM Labs attributed the attack to a DPRK-affiliated threat actor. The exploit combined three attack vectors:

1. Social engineering: A months-long campaign manipulated Drift's Security Council multisig members into pre-signing hidden transaction authorizations using Solana's durable-nonce mechanism.
2. Oracle manipulation: A fictitious asset ("CarbonVote Token") was seeded with a small amount of real liquidity and wash-traded until Drift's price oracles recognized it as legitimate high-value collateral, allowing the attackers to borrow against it at scale.
3. Zero-timelock migration: A Security Council migration was executed without a timelock, eliminating the protocol's last governance safeguard.

Stolen funds were bridged to Ethereum within hours. The incident is the largest DeFi hack of 2026 and the second-largest in Solana's history after the 2022 Wormhole bridge exploit ($326 million).

Recovery Plan

Drift outlined a recovery framework structured around recovery tokens issued to affected wallets, each pegged to $1 of verified user loss, and a recovery pool seeded with ongoing protocol revenue, a $127.5 million credit line from Tether, and up to $20 million from ecosystem partners. Full repayment is conditional on the pool accumulating the full $295.4 million in verified losses.

Rebrand to Velocity DEX

Following the exploit, Drift rebranded to Velocity DEX (velocity.exchange). The rebuilt platform adopts a narrower, more secure scope: perpetuals-only trading with USDT settlement, removal of Isolated Markets, Amplify, and other ancillary products, elimination of the durable-nonce mechanism exploited in April 2026, and a freshly deployed program with fully rotated keys. Mandatory instruction-level audits and review under Solana's STRIDE security program are required before mainnet deployment. A private beta launched in July 2026 for select partners; public relaunch is targeted for Q3 2026.

Solana Ecosystem Fit

Drift Protocol was designed around Solana's core properties: high throughput, sub-second finality, and low per-transaction costs. Its keeper bot infrastructure is permissionless and open-source. The protocol integrates Pyth and Switchboard oracles for redundant, high-frequency price feeds. Third-party developers can route trades through Drift's liquidity layer via open SDKs in Python and TypeScript and earn protocol fees for doing so, positioning the protocol as infrastructure for the broader Solana DeFi ecosystem rather than solely an end-user trading venue.