Drift Protocol has reportedly been exploited in a sophisticated attack involving the creation of fake CVT tokens and manipulation of the Switchboard oracle, according to Helius developer Ichigo. The attackers allegedly used social engineering to infiltrate the security committee's governance process, pushing the fake token as a high-weight collateral asset despite potential multisig permission compromises. Subsequently, they deposited approximately 20 million CVT tokens, valued near zero, which were artificially inflated to over $100 million. This allowed them to borrow real assets from the protocol and transfer funds, with the total scale of the attack estimated to exceed $200 million.