Yesterday, Ethereum lost two consecutive trades and was precisely busted. The first take-profit on Bitcoin has been reached, securing a 3000-point profit. You can reduce your position to keep a core holding and continue to aim for the second target. Ethereum is long around 2045, targeting 2075, with a stop-loss at 2025.

CoinWorld News reports that SlowMist published an analysis of the Drift theft incident, pointing out that one week before the attack, Drift adjusted its multi-signature mechanism to "2/5" (1 old signer + 4 new signers) and did not set a timelock. The attacker subsequently gained admin privileges, forged CVT tokens, manipulated oracles, disabled security mechanisms, and transferred high-value assets from the liquidity pool. Currently, the stolen funds have mainly been consolidated into an Ethereum address, totaling approximately 105,969 ETH (about $226 million). SlowMist stated that the flow of related funds is still being actively tracked.

riftProtocol was stolen for 270 million, a derivative protocol in the Solana ecosystem. Honestly, the method this time is quite ironic: the attacker took the most compliant route—exchanging for USDC via Jupiter, then transferring across the Circle cross-chain bridge to Ethereum to buy ETH. Where's the problem? Circle didn't freeze the funds for several hours. ZachXBT directly questioned on-chain: Why didn't you freeze it? The irony behind this is: everyone thinks USDC is safe because Circle can freeze addresses. But this time, Circle chose not to act. Large holders use USDC to hedge risks, effectively handing over asset control to Circle. The hacker exploited this loophole. The most ironic part is: a highly compliant funding channel has become the hacker’s best tool for transferring assets. Can DeFi vaults still hold funds? My view: don’t put all your assets in one basket; diversification is the key to risk management. What do you think about whether Circle did the right thing this time, #drift协议遭黑客攻击 $SOL ?