[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXFiq8sn-lGr8E08SwM7GTsdluqhSvB8wWgWbDtdPGqM":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38},"fa7c5fc1-6327-4289-a775-704e5c7631e1","defi-platform-loses-280m-through-compromised-multisig-controls","bdfcfc6b-e676-4c77-9563-3916a9e14772","DeFi Platform Loses $280M Through Compromised Multisig Controls","Drift Protocol lost $280 million when attackers obtained 2 out of 5 required signatures from Security Council members and exploited durable nonce accounts to pre-sign malicious transactions. The attack succeeded not through technical vulnerabilities, but by compromising the administrative processes governing the multisig wallet system. This incident demonstrates how inadequate access controls and poor governance processes can enable attackers to legitimately execute unauthorized transactions using valid credentials.","**Immediate actions:**\n- Audit all multisig wallet configurations and increase signature thresholds where possible\n- Disable or restrict durable nonce account functionality until proper controls are implemented\n- Review and revoke any pre-signed transactions or delegated authorities\n\n**Long-term improvements:**\n- Implement time-locked transactions with mandatory waiting periods for large fund transfers\n- Establish segregation of duties requiring approval from multiple independent parties for administrative changes\n- Deploy transaction monitoring systems that flag unusual patterns or large transfers for manual review\n\n**Governance controls:**\n- Create formal procedures for Security Council member authentication and authorization\n- Implement regular rotation of multisig participants and require fresh signatures for sensitive operations\n- Establish emergency response procedures to quickly freeze assets when suspicious activity is detected",[12,13,14,15,16,17],"CIS Control 6.1","CIS Control 6.2","NIST AC-2","NIST AC-3","NIST AC-6","NIST CM-5","published","2026-04-02T20:08:39.113198+00:00","2026-04-02T20:08:38.979+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdrift-loses-280-million-as-hackers-seize-security-council-powers\u002F","drift-loses-280-million-as-hackers-seize-security-council-powers","Drift loses $280 million as hackers seize Security Council powers",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":33,"name":34,"slug":35,"description":36,"color":37},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",[]]