ok so here's how drift got drained for $200M+. on-chain receipts for everything. its insane tbh
3 weeks before the exploit, the attacker mints 750M of a fake token "CarbonVote Token" (CVT) and creates a raydium pool with $500 of liquidity. sets the price at ~$1/token.