Eleven DeFi protocols have been confirmed to have been affected by the Drift security incident.

Drift Protocol Exploit Spreads to Multiple DeFi Protocols

The fallout from the Drift Protocol vulnerability is spreading. Several DeFi protocols have confirmed they were affected, including Reflect Money, Ranger Finance, Neutral Trade, Elemental DeFi, Project 0, Lulo Finance, Asgard Finance, DeFi Carrot, Pyra, xPlace, and Fuse Wallet. Some have paused minting, redemptions, or deposits and withdrawals.

Ranger Finance confirmed roughly $900,000 in exposure—about 6% of its $14.6 million total value locked (TVL). Pyra said user funds deposited on Drift to earn yield were impacted, and it has paused Pyra Card functions. Asgard Finance called its Drift-related exposure not material, disabled the credit source, and is contacting affected users.

Fuse Wallet paused Earn product deposits into Drift, though the wallet itself is unaffected. DeFi Carrot halted minting and redemptions, but its Boost and Turbo products are safe. xPlace paused deposits and withdrawals for its Savings product and temporarily disabled its credit model and lending features. Elemental DeFi and Project 0 said related capital allocations are on hold, pending Drift's recovery. Lulo Finance warned that Classic depositors may be affected, but its Protected and Boosted products have no exposure.