Drift Exploit Wallet Moves $61.56M in Ethereum to Tornado Cash, $198.58M Still Held

Wallets tied to April's $295 million Drift Protocol exploit moved 25,700 Ethereum — about $61.56 million — into crypto mixer Tornado Cash over roughly two hours on Tuesday, ending about two months of inactivity, according to Arkham Intelligence data. Deposits arrived in batches of 100 ETH (about $237,800 each) plus smaller 10 ETH chunks, matching the mixer's fixed pools, which break public links to withdrawal addresses. Arkham's entity page, tracking 71 addresses linked to the attacker, still shows 81,454 ETH worth roughly $198.58 million held after the transfers, plus about $561,600 in USDT, USDC, Solana and USDY. The move follows a first round on July 23 and 24, when an address labeled Drift Exploiter 4 sent about 23,095 ETH, then valued near $44.4 million, to the same mixer. The April 1 exploit hit Drift's Solana vaults after the attacker obtained admin powers, introduced a fake token and borrowed out real liquidity. Drift put the haul at $295.7 million, led by $159.3 million in JLP and $71.4 million in USDC, later swapped and bridged to Ethereum. Drift said Mandiant attributed the attack to North Korean group UNC6862.