Drift

Arkham

USDC

Security

Origin

<p><strong>The wallet linked to the Drift Protocol exploiter has reportedly added another 1,195 ETH to its holdings, lifting the total to an estimated 130,262 ETH, as on-chain analysts continue tracking one of the largest DeFi exploits of 2026.</strong></p>
<h2 id="fresh-eth-buy-adds-to-the-exploiter-linked-wallet">Fresh ETH Buy Adds to the Exploiter-Linked Wallet</h2>
<p>According to a single unconfirmed report, the Drift Protocol exploiter bought an additional 1,195 ETH for approximately $2.46 million in USDC. The purchase represents a continuation of the wallet's pattern of converting stolen assets into Ether through USDC intermediaries.</p>
<p>The incremental buy follows a far larger consolidation. On April 2, 2026, on-chain monitoring firm Lookonchain reported that the exploiter had <a href="https://x.com/lookonchain/status/2039518230222655742" rel="noopener noreferrer nofollow">swapped all stolen assets worth over $270 million into 129,066 ETH</a>, valued at roughly $273 million at the time. That earlier consolidation was also <a rel="noopener noreferrer nofollow">covered in detail as it unfolded</a>. The additional 1,195 ETH purchase, if confirmed, would bring the wallet to 130,262 ETH.</p>
<h2 id="wallet-holdings-now-stand-at-an-estimated-130-262-eth">Wallet Holdings Now Stand at an Estimated 130,262 ETH</h2>
<p>At current prices near $2,043, a 130,262 ETH position would be worth approximately $266 million. The headline figure of the wallet being worth "$26..." appears to reference a truncated version of that valuation, though the exact figure could not be independently verified.</p>
<figure><img src="https://tokentopnews.com/wp-content/uploads/2026/04/tokentopnews__coinmarketcap__price-chart-6.jpg" alt="CoinMarketCap price chart for Drift Protocol exploiter has further bought 1,195 $ETH for $2.46M $USDC; now his wallet has 130,262 $ETH worth $26...">
 <figcaption>
  CoinMarketCap chart illustrating the price backdrop referenced in this article on ethereum.
 </figcaption>
</figure>
<p>The scale dwarfs the initial on-chain breadcrumbs. On April 1, Lookonchain first flagged the exploiter swapping stolen funds into USDC, bridging them to Ethereum, and purchasing <a href="https://x.com/lookonchain/status/2039399827809996904" rel="noopener noreferrer nofollow">19,913 ETH worth about $42.6 million</a>. Within roughly 24 hours, the full conversion to 129,066 ETH was complete.</p>
<p>The rapid consolidation into a single asset on Ethereum's mainnet sets this apart from exploits where attackers spread funds across dozens of wallets and tokens. That concentrated ETH position has also raised concerns about potential <a rel="noopener noreferrer nofollow">ETH liquidation risk on leveraged platforms</a> should the attacker begin offloading.</p>
<h2 id="why-the-market-is-watching-this-address">Why the Market Is Watching This Address</h2>
<p>The wallet traces back to a breach that <a href="https://news.bloomberglaw.com/crypto/solana-based-defi-project-drift-hit-by-285-million-exploit" rel="noopener noreferrer nofollow">Bloomberg Law reported drained nearly $285 million</a> from the Solana-based perpetual futures protocol Drift. Security firm PeckShield and multiple data-analytics firms confirmed the figure, with Bloomberg noting that some stolen crypto was initially converted into USDC before being bridged cross-chain.</p>
<p>Drift itself confirmed on April 2 that a malicious actor gained unauthorized access through a novel durable-nonce attack that rapidly took over the protocol's <a href="https://x.com/DriftProtocol/status/2039564437795836039" rel="noopener noreferrer nofollow">Security Council administrative powers</a>. The day before, the team had warned users not to deposit funds while it investigated unusual activity.</p>
<p>The DRIFT token reflected the damage, trading at roughly $0.0486 and down 31.59% over 24 hours at last check. Broader crypto sentiment offered no cushion, with the Fear &amp; Greed Index sitting at 12, deep in "Extreme Fear" territory.</p>
<p>No regulatory action or asset freeze from Circle has been publicly confirmed as of April 2, despite the known conversion of stolen funds through USDC. The absence of a freeze notice has drawn <a rel="noopener noreferrer nofollow">criticism from industry figures questioning Circle's response</a> and remains an open question for observers tracking the incident.</p>
<div class="on-chain-data">
 <p>ON-CHAIN DATA</p>
 <ul>
  <li><strong>Exploiter entity:</strong><a href="https://intel.arkm.com/explorer/entity/d2d83436-91fa-4f46-b6df-84e523b154d0" rel="noopener noreferrer nofollow">Arkham Intelligence entity page</a></li>
  <li><strong>Confirmed holdings (Lookonchain, April 2):</strong> 129,066 ETH (~$273M)</li>
  <li><strong>Reported additional buy (unconfirmed):</strong> 1,195 ETH for ~$2.46M USDC</li>
  <li><strong>Reported total (unconfirmed):</strong> 130,262 ETH</li>
  <li><strong>Origin protocol:</strong> Drift Protocol (Solana)</li>
  <li><strong>Exploit method:</strong> Durable-nonce governance attack</li>
 </ul>
</div>
<p>Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://tokentopnews.com/?p=29574" rel="noopener noreferrer nofollow">Read original article on tokentopnews.com</a>

Drift Protocol Exploiter Buys 1,195 ETH, Holds 130,262 ETH

Table of Contents

Tokentopnews.com

Other articles published on Apr 2, 2026

Join our free newsletter for daily crypto updates!