Cryptocurrency lawyers say the Drift incident may constitute "civil negligence."

Attorney Ariel Givner stated that the $280 million attack on the Solana-based DeFi platform Drift Protocol could have been prevented through standard operating procedure security procedures, and this action may constitute civil negligence. The attack stemmed from the Drift team's failure to follow basic security procedures, including not storing signing keys in a physically isolated system and a lack of due diligence on blockchain developers at industry conferences. The Drift team stated in a post on the X platform that the attackers planned the attack for six months, initially contacting the team at a major crypto industry conference in October 2025. After establishing trust, the malicious actors hijacked developers' devices through malicious links and malware implants. Drift confirmed with medium-to-high confidence that the attackers were the same group involved in the October 2024 Radiant Capital attack. Class action lawsuit advertisements against Drift Protocol have begun circulating.