Hackers successfully drained $270 million from Drift's vaults on April 1, exploiting compromised devices to obtain two multisig approvals. The attackers had pre-signed transactions that remained inactive for over a week before executing the heist in under a minute. This incident highlights the vulnerabilities in multisig security protocols and the need for enhanced protective measures.