Drift exploiter’s mixer move sends $61M ETH away while $194M stays put

A wallet linked to the Drift Protocol hack deposited 25,700 ETH, worth about $61 million, into Tornado Cash over two hours on Tuesday after two months of inactivity, according to blockchain analytics platform Lookonchain. The exploiter’s addresses held about 81,454 Ether, worth roughly $194 million, according to Arkham.

Crypto mixers pool funds from multiple addresses and obscure transaction trails, making them harder to trace. Drift, a Solana-based decentralized exchange, reported about $295 million in losses from the April 1 hack.

Drift said in June that a forensic investigation by cybersecurity firm Mandiant attributed the attack to UNC6862, a North Korean threat group. Drift opened claims and redemptions for DFX recovery tokens on Oct. 1. The tokens give affected users a claim on a recovery pool, which held about $3.1 million at launch and receives exchange revenue and any recovered funds.

The Drift exploit ranks as the third-largest crypto hack of 2026, according to DefiLlama. Other notable exploits include the $387 million Bitget hack and the $320 million Liquid Network exploit.