Hacker Behind Drift Attack Funnels $109M Worth of Ether Through Tornado Cash Over 48 Hours

Hacker Behind Drift Attack Funnels $109M Worth of Ether Through Tornado Cash Over 48 Hours

Cryptocurrency addresses connected to the April breach totaling $295 million continue to hold $138 million in Ether following Wednesday's additional $46 million transfer to the mixing service.

On Wednesday, a cryptocurrency wallet associated with the Drift exploit moved 18,800 Ether, valued at approximately $46 million, into Tornado Cash.

According to blockchain data tracker Onchain Lens in a post on X, the perpetrator moved $61 million worth of Ether into the cryptocurrency mixing platform on Tuesday, bringing the 48-hour combined total to 44,510 ETH, equivalent to $109 million.

These movements to Tornado Cash complicate efforts to track the stolen assets and account for close to 37% of the total $295 million that was taken from the decentralized exchange (DEX) Drift during the April incident. Based on DefiLlama's records, this attack stands as the third-most significant cryptocurrency breach of the current year.

Following Wednesday's series of transfers, the cryptocurrency wallets identified as belonging to the Drift exploiter continue to hold 56,569 Ether, valued at approximately $138 million, according to information from Arkham data.

The decentralized exchange operating on the Solana blockchain disclosed losses totaling approximately $295 million resulting from the April 1 breach, which Mandiant, serving as its security consultant, linked to a threat group operating out of North Korea.

On Oct. 1, Drift initiated claims and redemptions for DFX recovery tokens, providing impacted users with claims against a pool that started with approximately $3.1 million and continues to receive exchange revenue along with any funds that are successfully recovered.