Overview
- Wallets linked to the April 1 Drift Protocol hack deposited about 25,700 ETH, worth roughly $61.56 million, into the Tornado Cash mixer on Tuesday in a roughly two-hour burst.
- Blockchain trackers still show the exploiter controlling about 81,454–81,864 ETH, a remaining stake valued near $194 million to $198 million after the October transfers, and different analytics accounts report slightly different snapshots.
- The April exploit used months of social engineering to gain multisignature admin approvals, exploited Solana’s durable nonce feature and approved a fake token called CVT to withdraw real assets, producing estimated losses of $285 million to $295.7 million.
- Drift opened DFX recovery-token claims on October 1 with an initial recovery pool near 3.1 million USDT and partner support that includes up to $127.5 million from Tether, but early redemptions paid only about a penny on the dollar.
- Tornado Cash pools deposits and lets withdrawals go to new addresses, which breaks direct on-chain links and makes it harder for investigators and victims to trace or recover stolen funds, a step that could slow enforcement and reduce near-term recoveries.