Drift Exploit Wallets Funnel $61.56M in ETH Into Tornado Cash

Wallets tied to the April exploit of Solana lending protocol Drift Protocol moved 25,700 Ethereum, worth about $61.56 million, into the Tornado Cash mixer over roughly two hours on Tuesday, Decrypt reported, citing Arkham Intelligence transfer data. The funds went in as repeated deposits of 100 ETH, each worth about $237,800, alongside smaller 10 ETH transfers, sizes that line up with the mixer's standard pool denominations, according to the outlet. This is a security warning: tracing shows stolen funds still actively moving through a mixer months after the original theft.

Arkham's tracking page, covering 71 wallet addresses associated with the attacker, showed 81,454 ETH remaining after Tuesday's transfers, valued near $198.58 million, Decrypt said. Those addresses also hold roughly $561.6K in assorted tokens such as USDT, USDC, Solana and USDY, per the report. A similar laundering burst happened on July 23 and 24, when a wallet labeled as the fourth Drift exploiter address sent close to 23,095 ETH, then worth about $44.4 million, into the same service.

Drift's own accounting put the April 1 theft at $295.7 million total, split between $159.3 million in JLP tokens and $71.4 million in USDC, Decrypt reported. The outlet also noted the attacker's Arkham holdings still list a single Fartcoin token worth roughly 15 cents, far short of the $4.1 million in Fartcoin that Drift says was originally stolen. Separately, Drift's relaunched venue, Velocity, began DFX recovery-token claims on October 1, issuing one token per dollar of verified loss across about 299.5 million tokens, with early redemptions paying near $0.0104 each against a $3.1 million starting pool, according to Decrypt. Whether the remaining ETH will be moved further, and whether any funds are recoverable, remains unknown, per the outlet.