Tornado

Tornado Cash

Drift

Cash

Arkham

<p>This is the largest suspicious fund movement observed in the past two years. The hacker of Drift Protocol has just made over 520 transfers to the mixer Tornado Cash, injecting more than 122.3 million dollars in Ethereum. While the analytics firm Arkham traces the digital trail of this loot to the letter, the crypto sector’s reaction ranges between shock and resignation.</p>
<div class="in-brief">
 <div class="in-brief--container"><span></span><span></span>
  <h2 class="in-brief--title" id="in-brief">In brief</h2>
  <ul>
   <li>Over $122.3 million in ETH was transferred and laundered to Tornado Cash within 48 hours by the hacker of Drift Protocol.</li>
   <li>This is the largest deposit made by a hacker on the mixer over the past two years.</li>
   <li>The initial attack on Drift Protocol (Solana) involved total damages of $285 million.</li>
   <li>Changpeng Zhao (CZ), founder of Binance, responds by reminding of inherent risks in any technology.</li>
  </ul>
 </div>
</div>
<h2 id="h-122-million-to-tornado-cash-the-heist-of-the-century-accelerates">$122 Million to Tornado Cash, the Heist of the Century Accelerates</h2>
<p>The radars of the on-chain analytics firm Arkham Intelligence turned bright red. The crypto wallet identified as belonging to the hacker of Drift Protocol came out of its inertia to orchestrate a <a href="https://www.cointribune.com/en/crypto-accused-of-massive-fraud-aiden-pleterski-ditches-his-lawyer/" rel="noopener noreferrer nofollow">large-scale laundering operation</a>. In just two days (October 20 and 21), the hacker divided his loot into 520 successive transactions to send 122.3 million dollars worth of ethereum to Tornado Cash.</p>
<div class="my-4">
 <div class="ads "></div>
</div>
<div class="tweet">
 <blockquote class="twitter-tweet"><a href="https://twitter.com/arkham/status/2113227476281516514?s=46?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow"></a>
 </blockquote>
</div>
<p>This is simply the biggest deposit made by a cybercriminal on Tornado Cash in two years. By initially converting the stolen tokens from Solana to the Ethereum network, the crypto hacker hopes to definitively obscure the financial trails despite sanctions and international authorities’ surveillance.</p>
<figure class="wp-block-table">
 <table>
  <tbody>
   <tr>
    <td>Key Figure</td>
    <td>Laundering Operation Indicator</td>
    <td>Source / Status</td>
   </tr>
   <tr>
    <td>$122.3 million</td>
    <td>Total amount converted into ETH and sent to Tornado Cash</td>
    <td>Arkham Intelligence</td>
   </tr>
   <tr>
    <td>520 transfers</td>
    <td>Number of split transactions to mask flows</td>
    <td>On-Chain Data</td>
   </tr>
   <tr>
    <td>$285 million</td>
    <td>Total estimated damage during the initial Drift Protocol hack</td>
    <td>DeFi Exploit Registry</td>
   </tr>
   <tr>
    <td>2 years</td>
    <td>Record for the largest pirate deposit on Tornado Cash</td>
    <td>Arkham History</td>
   </tr>
  </tbody>
 </table>
 <figcaption><em>Data from Arkham Intelligence.</em>
 </figcaption>
</figure>
<h2 id="h-arkham-s-hunt-exposes-hackers-modus-operandi">Arkham’s Hunt Exposes Hackers’ Modus Operandi</h2>
<p>Thanks to Arkham’s visual tools, the path of the stolen funds was retraced in real time. Following the exploit on the Drift Protocol smart contracts, the hacker had transferred the majority of his loot to ethereum crypto to store a strategic reserve of over 56,000 <a href="https://www.cointribune.com/en/tag/ethereum-eth/" rel="noopener noreferrer nofollow">ETH</a>. Using Tornado Cash at this scale demonstrates that cybercriminals continue to exploit anonymization tools of decentralized finance (DeFi), despite the strengthening of global surveillance.</p>
<p>This attempt at concealment highlights the ongoing fragility of cross-chain bridges and lending protocols, regularly targeted to siphon off colossal sums within minutes.</p>
<h2 id="h-wallet-security-cz-reminds-technology-limits-in-crypto">Wallet Security: CZ Reminds Technology Limits in Crypto</h2>
<p>In light of the scale of this laundering and renewed investor concerns about Web3 protocol vulnerabilities, major figures in the sector have spoken out. Changpeng Zhao (CZ), founder of Binance, <a href="https://x.com/cz_binance/status/2113245235665125831?s=46" rel="noopener noreferrer nofollow">reacted pragmatically on X</a> to warn users:</p>
<blockquote class="wp-block-quote">
 <p><em>No crypto wallet is 100% safe. No software is bug-free. No technology is 100% secure. There are risks in everything you do, just as there are risks if you do nothing. There will be problems, setbacks, and obstacles to solve. Stay up to date, manage risks, resolve issues.</em></p>
</blockquote>
<p>This reminder makes clear that absolute security remains an illusion in the crypto ecosystem. While the $122 million continue to be shuffled through Tornado Cash’s depths, DeFi developers face increasing pressure to strengthen audits of their infrastructures before the next assault.</p>
<p>The Drift Protocol case and this record laundering of $122 million via Tornado Cash prove that on-chain tracking and hacking engage in a permanent war of attrition in the crypto world. Do you think tracking tools like <a href="https://www.cointribune.com/en/to-fully-invest-in-ethereum-a-whale-sells-90-million-worth-of-bitcoin/" rel="noopener noreferrer nofollow">Arkham</a> will ever succeed in permanently neutralizing laundering?</p>

Crypto: The Drift Protocol Hacker Uses Tornado Cash to Launder $122 Million

Table of Contents

Cointribune EN

Other articles published on Oct 22, 2026

Join our free newsletter for daily crypto updates!