Drift Protocol has confirmed that Insurance Fund deposits were not impacted by the exploit and remain safe for withdrawal. According to an update published on 20 May, the protocol stated that the Insurance Fund 'was and remains unaffected by the exploit.' The Solana-based trading platform emphasized that the protocol was paused before losses moved through the normal liquidation or bankruptcy process, preventing the exploit from triggering Insurance Fund mechanisms. As reported by AMBCrypto, users will be able to withdraw their Insurance Fund stake when the protocol goes live, with the protocol now confirming that users who staked into the Insurance Fund will be able to withdraw their corresponding shares once the protocol is restored. The distinction matters because Drift's own documentation defines the Insurance Fund as the first backstop for maintaining exchange solvency in the event of bankruptcies, with users able to unstake from the fund though withdrawals are subject to a 13-day cooldown period.
The clarification follows significant community backlash over DIP-10, a governance proposal that outlined plans to convert remaining borrow/lend pool assets into USDT to support a recovery pool after the exploit. According to AMBCrypto, this proposal triggered concerns from users over centralized discretion around asset conversions, settlement fairness, and fears that user-linked funds could ultimately absorb exploit-related losses. The latest update appears designed to draw a clearer distinction between user-owned Insurance Fund deposits and protocol-owned capital reserves, with Drift emphasizing that user-owned Insurance Fund deposits are separate from protocol-owned capital reserves which may be used to support a healthy relaunch for all users. The protocol's explanation is straightforward: the insurance mechanism exists to absorb insolvency created by liquidations and bankruptcies, not to retroactively cover an external exploit that was halted before those internal loss pathways finished playing out.
Drift said protocol-owned Insurance Fund assets may still be used 'to support a healthy relaunch for all users,' while emphasizing that depositor stakes remain unaffected. As reported by AMBCrypto, the protocol stated that relevant program addresses would be publicly disclosed so the community can monitor how protocol-owned capital is deployed during the relaunch process. This transparency measure aims to address user concerns about how recovery funds will be managed during the platform's return to operations, with the update specifically designed to restore user trust as the platform navigates recovery and governance challenges post-exploit. The protocol now plans to publish the relevant on-chain addresses so the community can track how the funds are used, representing a notable shift from simply ring-fencing the fund toward actively deploying part of it in the recovery process.
Insurance Funds are commonly used across derivatives and lending protocols as a last-resort solvency backstop designed to absorb losses during liquidations or bankruptcies. According to AMBCrypto, following the exploit and protocol pause, some users feared the fund could become entangled in broader recovery efforts or partially socialized into protocol losses. Drift's statement suggests the team is attempting to preserve confidence in the platform's accounting structure by arguing that exploit losses never formally entered the Insurance Fund resolution pathway, which could become important for user trust as the protocol prepares for relaunch. The incident represents one of the biggest Solana DeFi breaches of the year, with security researchers describing it as a social engineering attack rather than a smart contract flaw that drained approximately $285 million through a compromised administrator key.
The broader recovery process continues to face scrutiny from users following the exploit and the controversial DIP-10 proposal. As reported by AMBCrypto, the incident has increasingly evolved beyond a purely technical security event into a larger governance and transparency challenge surrounding how DeFi protocols manage recovery, solvency, and user expectations after major incidents. The governance pressure remains elevated as the protocol prepares for potential relaunch operations, with the latest update representing Drift's effort to address these concerns through clearer communication about fund separation and transparency measures. The protocol had already lined up up to $147.5 million in support for affected users, including up to $127.5 million from Tether and another $20 million from partners, while later recovery plans pointed to recovery tokens tied to verified losses.
