Cosine: Drift migrated its multi-sig a week ago, the new multi-sig only requires a 2/5 signature threshold and has no timelock

Odaily News SlowMist founder Cosine posted on X, stating: "Drift Protocol was hacked for over $200 million in assets. A week ago, it migrated to a 2/5 multi-sig with no timelock (1 old + 4 new signers). The attacker took over admin permissions hours ago, minted CVT fake tokens, manipulated the Oracle, disabled related security mechanisms, and drained the pool's valuable assets..."