A Drift wallet linked to the decentralized exchange’s April hack resumed activity after two months, depositing 25,700 Ether into Tornado Cash over two hours on Oct. 20, according to blockchain analytics platform Lookonchain. The transfers were worth about $61 million.
Key Takeaways
- Lookonchain reported that the transfers followed two months of wallet inactivity.
- Arkham data put exploiter-linked holdings at roughly $194 million on Oct. 20.
- Drift’s recovery pool held about $3.1 million when token claims opened on Oct. 1.
Table of Contents
Drift wallet activity resumes through a mixer
The two-hour burst of deposits moved funds into a service designed to obscure transaction trails. Tornado Cash pools cryptocurrency from multiple addresses, making the movement of funds harder to trace.
According to Arkham data, the exploiter’s addresses held about 81,454 ETH, valued at roughly $194 million, on Oct. 20.
Recovery claims remain tied to a separate pool
Drift, a Solana-based decentralized exchange, reported approximately $295 million in losses from the April 1 attack. In June, the exchange said a forensic investigation by cybersecurity firm Mandiant had attributed the attack to UNC6862, a North Korean threat group.
Affected users gained access to claims and redemptions for DFX recovery tokens on Oct. 1. Those tokens provide a claim on a recovery pool that held about $3.1 million at launch and receives exchange revenue and any recovered funds.
DefiLlama ranked the Drift exploit as the third-largest cryptocurrency hack of 2026, behind the $387 million Bitget hack and the $320 million Liquid Network exploit.
Read More News
Disclaimer
This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.




