Tornado

Tornado Cash

Drift

Cash

Ethereum

<p>The address tied to the Drift Protocol exploit moved dormant funds through the sanctioned mixer after two months of inactivity.</p>
<p>A wallet associated with the exploit of decentralized trading platform Drift Protocol has become active again. The address had shown no movement for about two months before initiating the latest transfers.</p>
<p>Blockchain monitors reported the wallet moved a large batch of Ethereum into Tornado Cash, the privacy mixer sanctioned by the U.S. Treasury Department. Estimates of the amount sent vary slightly across trackers, ranging from roughly $61 million to $63 million. One estimate placed the transferred sum at approximately 25,700 ETH.</p>
<p>Tornado Cash works by pooling deposits from many users and breaking the on-chain link between a sender's address and the eventual withdrawal address. That makes it significantly harder for investigators and exchanges to trace where mixed funds end up. The protocol remains under U.S. sanctions, though courts have weighed in on the legality of those restrictions in separate proceedings over the past two years.</p>
<p>Despite the latest transfer, the exploiter's wallet reportedly still holds a substantial balance. One estimate put the remaining funds at around $194 million, suggesting the mixer deposit represents only a portion of the total proceeds from the original exploit.</p>
<p>The renewed activity complicates any ongoing negotiations or recovery attempts tied to the Drift exploit. When stolen funds sit untouched in a traceable wallet, project teams and white-hat negotiators often retain some leverage to pursue a return of assets, sometimes in exchange for a bounty. Once funds pass through a mixer, that leverage diminishes substantially.</p>
<p>Drift Protocol is a decentralized perpetual futures exchange built on the Solana blockchain, known for offering leveraged trading without relying on a traditional centralized order book. Exploits against DeFi platforms, whether through smart contract bugs, oracle manipulation, or compromised keys, have remained a persistent risk across the sector even as total value locked in DeFi has grown.</p>
<p>The pattern of dormancy followed by sudden laundering activity is common among crypto exploiters. Attackers frequently wait out the initial period of heightened scrutiny following an incident before attempting to move or obscure stolen assets. The two-month gap in this case fits that broader pattern observed in past DeFi exploits.</p>
<h2 id="market-impact">Market Impact</h2>
<p>The transfer is unlikely to move broader Ethereum markets given the relatively modest size of the sum against total ETH trading volume. The more significant impact falls on Drift Protocol and its users, as the movement reduces the likelihood of a negotiated return of funds.</p>
<p>The event also reinforces scrutiny on Tornado Cash's role in laundering proceeds from crypto exploits, a topic that continues to draw attention from regulators, exchanges, and compliance teams monitoring on-chain fund flows tied to sanctioned mixing services.</p>
<p>The resurfacing of the Drift exploiter's wallet underscores how recovery efforts for DeFi hacks often remain unresolved long after the initial incident. With a large balance reportedly still in the attacker's control, further transfers could follow.</p>
<h2 id="frequently-asked-questions">Frequently Asked Questions</h2>
<h3 id="what-is-tornado-cash-and-why-does-it-matter-here">What is Tornado Cash and why does it matter here?</h3>
<p>Tornado Cash is a cryptocurrency mixing service that obscures the link between sender and receiver addresses. It remains under U.S. sanctions, and funds routed through it become significantly harder to trace.</p>
<h3 id="how-much-ethereum-did-the-drift-exploiter-move">How much Ethereum did the Drift exploiter move?</h3>
<p>Reported figures range from approximately $61 million to $63 million, with one estimate citing roughly 25,700 ETH transferred into the mixer.</p>
<h3 id="does-the-exploiter-still-hold-additional-funds">Does the exploiter still hold additional funds?</h3>
<p>Yes, one estimate puts the wallet's remaining balance at around $194 million, suggesting the recent transfer was only part of the total proceeds.</p>
<h3 id="what-was-the-original-drift-protocol-exploit">What was the original Drift Protocol exploit?</h3>
<p>Drift Protocol is a decentralized perpetual futures exchange on Solana that suffered an exploit, after which the attacker's wallet went dormant for roughly two months before this recent activity.</p>
<h3 id="does-moving-funds-through-tornado-cash-affect-recovery-efforts">Does moving funds through Tornado Cash affect recovery efforts?</h3>
<p>It can. Once stolen assets pass through a mixer, tracing and negotiating their return becomes considerably more difficult for affected projects and investigators.</p>
<p>Originally reported by <a href="https://altcoingordon.com/drift-exploiter-wallet-resurfaces-sends-61m-ethereum-tornado-cash/" rel="noopener noreferrer nofollow">AltcoinGordon</a>, written by Sophia Bennett. Republished with permission.</p>
<p><a href="https://altcoingordon.com/drift-exploiter-wallet-resurfaces-sends-61m-ethereum-tornado-cash/" rel="noopener noreferrer nofollow">View the original on AltcoinGordon →</a></p>
<p>The post <a href="https://thecoinrise.com/drift-exploiter-wallet-resurfaces-sends-over-61m-in-ethereum-to-tornado-cash/" rel="noopener noreferrer nofollow">Drift Exploiter Wallet Resurfaces, Sends Over $61M in Ethereum to Tornado Cash</a> appeared first on <a href="https://thecoinrise.com/" rel="noopener noreferrer nofollow">TheCoinrise.com</a>.</p>

Drift Exploiter Wallet Resurfaces, Sends Over $61M in Ethereum to Tornado Cash

Table of Contents

TheCoinrise Media

Other articles published on Oct 21, 2026

Join our free newsletter for daily crypto updates!