Drift said a North Korean organization was behind its recent $270 million hack. Drift identified the attacker as UNC4736, a unit under North Korea's Reconnaissance General Bureau, in a report posted on its official X account on April 5. Drift said the group posed as a quantitative trading firm last fall and used conference meetings and a $1 million platform deposit to build trust. Drift said the attackers later infected contributor devices, gained multi-signature approval authority, and stole the funds in one minute through a Durable Nonce attack.