started · updated
Drift Protocol hacker launders $61.5 million via Tornado Cash
An address linked to the April heist of the Solana-based perpetuals protocol Drift Protocol has moved 25,710 ETH, valued at approximately $61.5 million, into the Tornado Cash mixing service. The transfers occurred over a two-hour period on October 20, consisting primarily of 100 ETH tranches and smaller 10 ETH increments.
This movement follows a previous laundering event in July, where approximately 24,400 ETH was sent to the same mixer. On-chain analysts from Arkham Intelligence and Chainalysis note that the wallet had remained dormant for roughly two months prior to this activity.
The original exploit, which occurred in April, resulted in a total loss of approximately $296 million. Mandiant has attributed the attack to the North Korean hacking group UNC6862. Despite the ongoing laundering of funds, thousands of Drift users are still awaiting compensation. Approximately 81,454 ETH, valued at nearly $195 million, remains held across 71 addresses linked to the exploiter.
Entities
Arkham Intelligence · Drift Protocol · Mandiant · Solana · Tornado Cash
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] The total loss from the Drift Protocol exploit is approximately $296 million. www.blocktempo.com · www.cryptopolitan.com · www.merca2.es
- [● 3 SOURCES] The hacker moved 25,710 ETH into Tornado Cash on October 20. www.blocktempo.com · www.cryptopolitan.com · www.merca2.es
- [● 2 SOURCES] The hacker previously sent 23,095 ETH to Tornado Cash in July. www.blocktempo.com · www.cryptopolitan.com
- [● 2 SOURCES] Approximately 81,454 ETH remains in addresses held by the hacker. www.blocktempo.com · www.cryptopolitan.com
- [○ 1 SOURCE] Mandiant attributed the attack to the North Korean hacking group UNC6862. www.blocktempo.com
- [○ 1 SOURCE] The attacker used durable nonces to trick multi-sig approvals. www.blocktempo.com
- [● 3 SOURCES] The deposits were made in batches of 100 ETH and 10 ETH. www.blocktempo.com · www.cryptopolitan.com · www.merca2.es
- [● 3 SOURCES] The laundered amount is valued at approximately $61.5 million. www.blocktempo.com · www.cryptopolitan.com · www.merca2.es