This story was published on Sentora Research
On April 16, Tether committed $127.5 million to Drift Protocol’s recovery, two weeks after North Korean hackers drained $285 million from the Solana-based perpetuals DEX in the largest DeFi exploit of 2026. The deal requires Drift to drop USDC and relaunch as a USDT-native exchange on a chain where Circle’s stablecoin holds a 2.65x supply lead. The move follows six hours of inaction as $232 million in stolen USDC crossed Circle’s own bridge unchallenged, exposing a real fault line between the two biggest stablecoin issuers over when an issuer should freeze funds without a court order. In this issue, we cover the attack mechanics, the recovery structure, and what Tether’s Solana push means for stablecoin market share.
Weekly Key Metrics
Network Fees
- Bitcoin: Fees rose +12.2% to $1.21M alongside a +5.6% price gain. The recovery was driven by Iran ceasefire signals restoring risk appetite across markets and progress on the CLARITY Act, with the Senate returning from Easter recess on April 13 and a Banking Committee markup targeted for late April. Morgan Stanley also launched a spot Bitcoin ETF at 0.14%, the lowest expense ratio in the market, adding institutional tailwinds.
- Ethereum: Fees climbed +16.1% to $2.15M as ETH outpaced BTC with a +6.8% week. Spot ETH ETFs recorded strong weekly inflows, pushing cumulative net inflows past $11.68 billion. Daily Ethereum transactions rose 41% over the week, suggesting on-chain activity is accelerating alongside the price recovery.
Exchange Netflows
- BTC: Bitcoin saw -$1.90B in exchange outflows even as price recovered sharply. Spot Bitcoin ETFs recorded large in inflows by April 9 but then saw modest in outflows on April 13, pointing to rotation out of BTC and into ETH and altcoins rather than a broad retreat from crypto.
- ETH: Ethereum flipped to +$128M in net exchange inflows, the only positive reading between the two assets. This is consistent with active ETF creation activity: new shares are minted by depositing ETH with authorized participants, which registers as exchange inflows. Combined with strong ETF flow data, it suggests institutional demand drove the week’s ETH outperformance.
Tether’s $150M Drift rescue: bailout or strategic takeover
On April 1, hackers linked to a North Korea’s group drained $285 million from Drift in under 12 minutes. The attack was not a smart contract exploit but an operational security failure six months in the making. The attackers built false identities, met Drift contributors in person across multiple countries, and ultimately obtained approval signatures from two of Drift’s five Security Council members using Solana’s durable nonce feature.
On execution, they listed fraudulent tokens as valid collateral, raised withdrawal limits, and emptied the protocol across several transactions. The largest single component was $155.6 million in JLP tokens, followed by $60.4 million in USDC. Solana DeFi TVL fell 12% in the days after, from $8.1 billion to $5.7 billion, with downstream losses across at least 20 connected protocols exceeding $22 million.
The $147.5 million package announced April 16 breaks down as follows:
- Tether is providing a $100 million revenue-linked credit facility and $27.5 million in direct support via an ecosystem grant and market maker loans.
- Ecosystem partners contribute the remaining $20 million.
- Affected users receive transferable recovery tokens representing a claim on a recovery pool, funded by ongoing Drift exchange revenue plus the committed capital.
- Full repayment of the $285–295 million loss depends entirely on Drift generating sustained trading volume after relaunch. Users who lost deposits are not being made whole immediately, they are being given a revenue share instrument and told to wait.
Circle vs Tether
After the hack, attackers converted most of the stolen assets to USDC and moved $232 million across Circle’s CCTP bridge from Solana to Ethereum in more than 100 transactions over six hours. Circle did not freeze the funds. CEO Jeremy Allaire, speaking in Seoul on April 13, said the company freezes wallets only when directed by law enforcement or courts: “Circle follows the rule of law.” Blockchain investigator ZachXBT countered that Circle’s inaction across more than a dozen cases since 2022 has contributed to over $420 million in illicit funds escaping.
Tether has positioned itself as the opposite: proactive, willing to freeze funds without waiting for a court order, and publicly claiming to have recovered $800 million in stolen crypto through partnerships with 10 law enforcement agencies across 64 countries. Both models carry real trade-offs. Tether’s approach gives it discretion to act unilaterally while Circle’s gives it regulatory predictability. The practical consequence this week was that $232 million moved through USDC rails without interruption, and Tether is collecting Drift’s relaunch as a direct result.
The USDT pivot on Solana
The strategic dimension is hard to miss. Solana has been a USDC stronghold: USDC’s on-chain market cap on Solana sits at $8.1 billion against USDT’s $3.05 billion, a 2.65x advantage. Drift’s pre-hack TVL was $550 million, making it Solana’s eighth-largest protocol. Tether claims the relaunch will onboard more than 128,000 users and 35 ecosystem teams onto USDT-based markets on Solana. If Drift recovers meaningful volume, this is a material dent in USDC’s Solana dominance, achieved at the cost of a $127.5 million credit facility that is repaid through the exchange’s own future revenue.
Key Weekly DeFi Metrics
Key takeaways for this week:
- Most notable item is the convergence of CDOR rates. This signals that users are pricing the risks of the two stablecoins similarly compared to before.
- Stablecoin availability has been dropping as users increase leverage expecting more favorable market conditions to come.
Tranched Yield Products: Mechanics Matter
A new class of DeFi protocols now offers tranching as a generalized primitive, splitting any yield-bearing asset into junior and senior tranches without requiring the asset issuer to build the structure itself. Junior tranches absorb first losses for boosted yield; senior tranches sit behind that buffer for a lower but structurally protected rate. The design mirrors traditional credit tranching, but because any asset can be wrapped this way, implementations vary sharply, and those differences determine what happens to user capital under stress.
The most common gap between expectation and reality is duration. Senior tranches are marketed as the lower-risk, more liquid option, but many designs include pause logic or redemption queues that activate precisely during loss events, governance interventions, or oracle freezes. A senior holder expecting same-day redemption can find their position locked for an assessment window, socialization process, or rebalancing cycle. Junior tranches are illiquid by construction, so that illiquidity is priced in; senior duration risk is often only visible in the withdrawal state machine.
The second consideration is coverage scope. Junior buffers are almost always sized against expected economic drawdowns (liquidation losses, basis slippage, depeg absorption, negative funding), not technical exploits, oracle manipulation, or governance compromise. The Resolv USR mint exploit illustrates the gap: RLP was designed to absorb economic drawdowns in the delta-neutral strategy backing USR, but a smart contract vulnerability damaged the peg directly, and how RLP’s mandate applies to a non-economic loss of that kind remains unclear. Senior holders relying on the buffer for safety should confirm what it covers and what happens when a loss falls outside that scope.
None of this argues against tranched products. Differentiating risk profiles on a shared collateral pool is a clear improvement over monolithic yield vaults and opens assets to users who would otherwise hold neither the unlevered nor the leveraged version. Tranching changes the shape of risk, it does not eliminate it, and that shape is defined by design choices that differ materially between protocols. Before entering a junior position, confirm the drawdown scenarios that trigger a write-down and whether it is pro-rata or staged. Before entering a senior position, confirm the pause and redemption conditions and the exact coverage scope of the buffer.
Stablecoins have become a core part of how institutions move and manage capital. But despite the rapid growth in stablecoin usage, a large portion of institutional balances still sit idle. Fireblocks Earn feature, announced this week, is designed to change that by making it easier for institutions to access onchain lending opportunities through a familiar operational environment. Sentora is a key partner for this new feature, acting as the curator for Morpho curated vaults.
Tether’s $150M Drift rescue: bailout or strategic takeover was originally published in Sentora on Medium, where people are continuing the conversation by highlighting and responding to this story.
