The exploit used a playbook similar to Drift’s $285 million breach earlier this month: a compromised deployer key with no timelock or multisig that drained funds.