A sophisticated phishing attack exploiting the durable nonce offline pre-signature mechanism has compromised Drift's on-chain admin privileges. This technique, which has been prevalent for at least two years, allows attackers to execute legitimate-looking on-chain operations at a future date once they obtain the pre-signed signatures. The recent incident appears to be orchestrated by a professional hacking group, demonstrating well-prepared and seasoned tactics.