00

← Control map

Drift Protocol

Who can change Drift Protocol, read straight from the chain. TVL $642,449 (DefiLlama, display only)

A85 · Strong
verified onchain

Who can move your money

click a node · pinch or use controls to zoom
  • Drift v2 program → Squads 4-of-7 (upgrade via vault #0)
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Squads 4-of-7 → Signer
  • Drift v2 program → Collateral (accepts)

Facts

Drift v2 program
ProgramdRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UHProgramData7dLgmtcTavcguNoynVimF9ZNVb13FvhXVRfj2HyrDGaPLast deploy slot429731225Upgrade authorityWhat does this mean?The key that can replace a program's code. Whoever holds it can change the rules, including how your deposit can be withdrawn.8jj7zJgdr5bDndc7evM74FMGwzLPmd4u4QxNzFi1BMaiAuthority typeSquads v4 multisig
Squads v4 multisigWhat does this mean?A wallet that needs several people to approve a transaction, for example 3 of 5. Safer than one key, if enough different people must sign. · upgrade authority
Address7qipzLR9j1JcvdxE1XJEFgvoyFmgBpgw5hMdHBMPcJtMThresholdWhat does this mean?How many signers of a multisig must approve a change.4 of 7TimelockWhat does this mean?A mandatory waiting period between approving a change and it taking effect. It gives depositors time to withdraw if something bad is approved.1 hour (3600s)Config authorityWhat does this mean?A Squads setting that lets one key change the multisig's signers, threshold and timelock instantly, without a vote.none, so changes need a votePending confignone
SignerPermissionsNonce accountsWhat does this mean?A Solana feature that lets a transaction be signed now and submitted any time later. Normal transactions expire in about a minute. The Drift attacker collected pre-signed durable-nonce transactions from signers days in advance.
prpH…Wco3initiatenone
3mpT…qAfSinitiate · vote · executenone
7CZf…BoKcinitiate · vote · executenone
9jZy…H5bRinitiate · vote · executenone
DMzK…Vuucinitiate · vote · executenone
F9zc…AxpGinitiate · vote · executenone
FDwW…XgoCinitiate · vote · executenone
Collateral tokens
EPjF…Dt1vspl-tokenFreezeAuthority
Admin config
Account5zpq…xcsN drift:StateAdminH7Pi…7ZgL single key (could be MPC/HSM-held, not verifiable onchain)signerJCNCMFXo5M5qwUPg2Utu1u6YWp3MbygxqBsBeXXJfrwwhitelistMint11111111111111111111111111111111

Score breakdown

Start100
Timelock is shorter than 24 hours.−15
Score85 · A

Flags: none. How grades work →

Onchain registry

RiskRecord PDAvgmt…VaB2Score / grade85 / AFlags0 Version4 (slot 509975201)Publisher6x7M…PR73

Any Solana program can read this account (owner and PDAWhat does this mean?Program Derived Address: an address controlled by a program rather than a private key. check) and act on it. How programs use it →

Get alerts

Telegram: watch Drift ProtocolWebhook or email

Governance timeline

  1. MEDIUMhistory
    Drift Protocol set approvals needed to 4 of 7

    Every change now needs 4 of 7 signers to approve it. The earlier setting is older than the history we scanned.

    MULTISIG_CONFIG_EXECUTED · slot 436166897 · tx 3vKA…tb5h

  2. MEDIUMhistory
    Drift Protocol added a signer

    F9zc…AxpG can now approve changes. The multisig now has 7 signers.

    MEMBERS_CHANGED · slot 436088282 · tx 5Lad…r7va

  3. MEDIUMhistory
    Drift Protocol removed a signer

    4hdB…W9kF can no longer approve changes. The multisig now has 6 signers.

    MEMBERS_CHANGED · slot 433276835 · tx 46ga…6P2W