Drift Protocol has confirmed that its insurance fund remains untouched after the recent security breach, and that users who staked tokens into the fund will be able to reclaim their shares once the platform is operational again. According to an official statement on X, the insurance fund was not compromised because the protocol was halted before any liquidation or bankruptcy procedures could finalize losses.
The insurance fund is designed to cover losses from insolvent liquidations and bankruptcies, not external exploits that were stopped before those internal processes completed. By pausing the protocol early, the exploit did not trigger the fund’s use. This aligns with findings from Elliptic, which estimated the exploit at $286 million and noted Drift suspended deposits and withdrawals during the attack. Chainalysis also described the breach as a privileged-access compromise leading to roughly $285 million in losses within minutes.
Drift has stated that its own insurance fund assets will be used to support the system restart and user recovery efforts, and it plans to share on-chain addresses for transparency. This marks a shift from simply protecting the fund to actively deploying it in the recovery process. Previously, Drift secured up to $147.5 million in support from partners like Tether and others, with later plans involving recovery tokens tied to verified losses.
For users who staked into the insurance fund, the key takeaway is that their stakes are safe and withdrawals will resume after the recovery process is complete. The protocol emphasized that the insurance fund was never part of the loss chain from the exploit, and normal unstaking will be enabled once operations restart.