During my sleep time, @DriftProtocol was hacked for 285M in assets.

Event cause:
The core issue was the leakage of Drift's multi-signature key. The attacker modified the admin permissions of the Drift state account and obtained approval from a multi-signature member, gaining control over the protocol funds.
The attacker quickly sold most of the stolen Solana assets and transferred about 130,000 ETH to the Ethereum network via cross-chain bridge services like Mayan Finance.
During the incident, on-chain data showed the attacker held assets worth $141 million in SOL, $82 million in ETH, and $18 million in BTC.
Arbitrage opportunities:
1️⃣ Certainly, there is an on-chain and off-chain price difference for $Drfit and some stolen tokens. Whether using flash loans or direct purchases, exploiting these price differences should be very profitable.
2️⃣ Bridge arbitrage: During such large-scale fund movements, asset prices between different chains or bridges may experience short-term imbalances, which could be exploited.
3️⃣ I don't have a "clamp" (夹子), so I won't discuss it for now.
4️⃣ I don't have a liquidation bot (清算bot), so I won't discuss it for now.
Inherent risks in the DeFi space do indeed exist. After five years of development, "code is law" seems to have become a joke. Will decentralized DeFi be replaced by semi-centralized CeFi? Perhaps the answer is already clear.