Drift said Wednesday's $280 million exploit was a result of unauthorized transaction approvals, facilitated through durable nonce mechanisms.