A wallet associated with the April 1 breach of the Drift Protocol transferred approximately $61 million in Ether to the Tornado Cash mixing service. According to data from Lookonchain, the transaction involved 25 700 ETH and occurred over a two-hour window on Tuesday following a two-month period of inactivity.
Blockchain analytics firm Arkham reports that the attacker currently retains control over 81 454 ETH, which is valued at roughly $194 million. The original exploit, which targeted the Solana-based decentralized exchange, resulted in total losses of approximately $295 million.
A forensic investigation conducted by Mandiant previously linked the incident to the North Korean threat group identified as UNC6862. DefiLlama currently ranks the Drift Protocol incident as the third-largest cryptocurrency hack recorded in 2026, trailing the Bitget and Liquid Network security breaches.
In response to the incident, Drift initiated a recovery process on October 1 by issuing DFX tokens to affected users. These tokens provide claims on a recovery pool that contained $3.1 million at the time of launch and is funded through exchange revenue and any recovered assets.
