Drift Protocol Exploiter Moves $109M to Tornado Cash

The transfers occurred between October 20 and 21, with Wednesday accounting for 18,800 ETH, or $46 million of the total. This activity follows an earlier $61 million movement on Tuesday. While these transactions represent over one-third of the $295 million lost during the April 1 breach, the use of a mixer complicates efforts to trace or recover the assets. According to Arkham Intelligence, the exploiter wallets retained 56,569 ETH following the latest deposits, though this figure fluctuates alongside market prices.

Mandiant investigators previously attributed the breach to UNC6862, a North Korean threat group that gained access to the platform through compromised operational channels. In response, Drift launched a DFX token-based recovery framework on October 1, backed by a pool containing 3.1 million USDT. While Tether and other partners have pledged significant support, the current redemption rate remains approximately 0.0104 USDT per DFX. The platform continues to direct portions of its protocol revenue into the recovery pool, aiming to provide compensation to affected users through 2028.