Drift suffered a significant security breach following a change in its multisig configuration, according to a SlowMist analysis. The platform altered its multisig setup to a "2/5" configuration, involving one old signer and four new signers, without a timelock, just a week before the attack. This allowed the attacker to gain administrative privileges, forge CVT tokens, manipulate oracles, disable security mechanisms, and transfer substantial assets from the vault. The stolen funds, amounting to approximately 105,969 ETH (around $226 million), have been consolidated into Ethereum addresses. SlowMist is actively tracking the movement of these funds as the investigation continues.