Decentralized finance, when not done correctly, often lends itself to massive crypto heists that result in millions being stolen and the story of the Drift protocol which operates on the Solana blockchain is no different. Attackers didn't actually need a vulnerability in code to pull off this heist, however, just two separate people who signed off on a malicious transaction.

Sources: https://pastebin.com/Q5BYYapY