Drift Exploiter Wallets Send About $61.6 Million in ETH to Tornado Cash
By Crypto Wire
October 20, 2026
Wallets linked to the April 1 Drift Protocol exploit moved about 25,700 ETH — roughly $61.56 million — into Tornado Cash over about two hours on Tuesday, October 20, 2026, ending roughly two months of reported inactivity, blockchain monitor Lookonchain posted. crypto.news and Cointelegraph both tracked the same day’s mixer deposits. Lookonchain estimated the cluster still controlled about 81,864 ETH (~$195 million) after the transfers; Cointelegraph cited Arkham figures near 81,454 ETH (~$194 million). Those residual tallies move as wallets hop — treat them as tracker snapshots, not a final recovered balance.
This is a funds-trail update, not a new breach. Drift, a Solana perpetuals venue, previously put stolen assets near $295 million in its own breakdown after Chainalysis’s early $285 million loss estimate. Mandiant later attributed the April intrusion to UNC6862, a North Korea-linked group, Drift said in June. Attackers had spent months social-engineering Security Council approvals, abused Solana durable nonces, and used a fake CarbonVote Token (CVT) collateral path to drain real assets — the forensic spine this desk already logged when Drift froze about $9.2 million tied to the April theft.
Mixer math does not equal cash-out math. Tornado Cash pools deposits and lets withdrawals exit through separate addresses, which breaks simple hop tracing without proving an exchange sale or fiat off-ramp. An earlier Onchain Lens print saw at least 13,400 ETH (~$32 million) into the mixer as the wave began, and Salus flagged about 19,600 ETH (~$46.81 million) across 196 deposits from one monitored wallet — partial windows inside the same Tuesday move, not competing “final” totals. Until explorers publish a reconciled set of mixer deposit hashes, keep the Lookonchain 25,700 ETH figure as the headline cluster print.
Recovery rails for victims are already live and separate from today’s mixer print. Drift opened DFX recovery-token claims and redemptions on October 1, with a pool near $3.1 million USDT at launch, a fixed supply near 299.5 million DFX, and claims open through January 1, 2028. Velocity trading revenue, partner commitments (including Tether’s up to $127.5 million support line cited in Drift’s October materials), and any frozen or seized funds are supposed to feed that pool — but a DFX balance is not a guaranteed dollar-for-dollar refund on demand. NFT and Solana DeFi collectors watching Drift exposure should separate three clocks: the April exploit path, the DFX claim window, and today’s ETH-to-Tornado hop.
DefiLlama still ranks the Drift theft among 2026’s largest protocol losses, behind incidents including the roughly $387 million Bitget hack already on this wire’s security board. That league table is backdrop only. Tuesday’s unused fact is the mixer reactivation after dormancy — a laundering-stage signal that can precede exchange probes, freezes, or further chain hops, not a new smart-contract bug on Drift’s live books.
What to watch on-chain next: Track whether Lookonchain or Arkham post reconciled Tornado deposit hashes for the full 25,700 ETH cluster, whether residual ETH leaves the ~81k–82k ETH wallets toward new bridges or CEXs, and whether Drift adds any newly frozen or recovered dollars to the DFX pool after this week’s mixer activity.
Bottom line: Drift-linked wallets deposited about 25,700 ETH (~$61.56 million) into Tornado Cash on October 20, 2026 after two months quiet — residual holdings still near $194–$195 million in ETH.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The cryptocurrency and NFT markets are highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
