DEX

The Solana Foundation said on Monday it introduced STRIDE, a security auditing and monitoring program for Solana-based DeFi protocols, alongside the Solana Incident Response Network for real-time coordination. STRIDE assesses projects across eight areas such as program security, governance controls, operational security, and incident response, with results intended to be published publicly. The update follows a reported ~$280 million loss at Drift Protocol after a social-engineering attack tied to North Korean-linked actors.

Chaos Labs has ended its three-year role as Aave's primary risk service provider, saying Aave's planned move to Aave V4 created added operational and legal exposure it would not take on. Chaos Labs founder Omer Goldberg said Aave Labs supported raising the engagement to $5 million, but the parties diverged on how risk management should work. Aave Labs CEO Stani Kulechov said the split was not hostile and claimed Chaos sought to become the sole risk provider and replace Chainlink oracles.

Development data tracked over the past 30 days highlights widening gaps among leading DeFi protocols, with Chainlink (LINK) ranked first and DeepBook (DEEP) second. Key milestones include Swift and major banks completing Chainlink CCIP tokenized-transfer trials on April 5, 2026, Aave V4 launching on Ethereum mainnet on March 30, 2026, and Euler reporting more than $100 million in new deposits across Base, Swell, and Sonic.

Drift Protocol says the April 1 attack that led to a $285,000,000+ loss followed roughly six months of in-person social engineering tied to multiple crypto conferences. The Solana-based DeFi project says the group posed as a quantitative trading firm, onboarded an Ecosystem Vault in December and January, and deposited more than $1 milllion of its own capital before the incident.

Polymarket is overhauling its exchange infrastructure and plans to introduce Polymarket USD, a platform-native token backed 1:1 by USDC. The rollout is expected over the next two to three weeks and includes CLOB v2, new smart contracts, and a collateral migration from USDC.e. The changes arrive as U.S. prediction markets see improving legal clarity around event-based contracts.

MetaMask developer and security researcher Taylor Monahan said North Korean IT workers have been embedded in crypto companies and DeFi projects for at least seven years, alleging involvement across 40+ DeFi platforms. Her comments followed Drift Protocol's statement of "medium-high confidence" that its recent $280 million exploit was conducted by a North Korea state-affiliated group.

Drift Protocol suffered an exploit in which an attacker drained about $285 million by leveraging pre-signed transactions and manipulating a multi-signature setup to obtain admin access. The incident is being cited as a sign that DeFi threats are increasingly targeting governance and operational control layers rather than only smart-contract bugs. Drift's rapid steps to confirm the attack and pause deposits and withdrawals also underscored how response speed can shape user trust.

DeFi value capture is increasingly tied to active trading, as 24-hour perpetual volume sat near $8.4 billion versus about $3.7 billion in Spot DEX volume. Hyperliquid accounted for roughly $618,377 of $41.45million in total DeFi fees, while its share reached about 36.4% by March 2026. HIP-3 metrics show about $154.95 billion in total volume and $12.43 million in fees, with the last 24 hours sending about $403,475 into buybacks that removed around 10,794 HYPE from circulation.

Ethereum’s on-chain role has shifted toward structured financial activity, with ETH stablecoins at about $166.1 billion and tokenized U.S. Treasuries surpassing $12 billion. Quarterly stablecoin transfer volume is near $8 trillion, yet daily fees sit around $157,000 and ETH issuance continues to exceed burns. DeFi TVL is roughly $52.6 billion and DEX volume about $548 million, while rollups keep base fees near 0.6 Gwei, improving access but limiting direct value capture.

Drift Protocol released a detailed Saturday update on its April 1 incident that drained about $280 million from its Solana perpetuals exchange, describing a roughly six-month social engineering campaign that began around fall 2025. The attackers allegedly posed as a quant firm, met contributors at multiple conferences, and deposited over $1 million into an Ecosystem Vault before obtaining pre-signed approvals and taking control within minutes. Drift and SEAL 911 said they have “medium-high” confidence the operation matches the North Korea-aligned actors behind the $50 million Radiant Capital hack in October 2024, while Mandiant has not yet issued formal attribution.