According to Decrypt, a wallet associated with the attacker responsible for April’s $295 million Drift heist transferred 25,700 ETH into the Tornado Cash mixer within two hours. The individual or group behind the exploit remains estimated to retain approximately $198 million in assets.
The Drift heist occurred in April and involved the theft of funds from a target linked to cryptocurrency infrastructure. The attacker’s activity included routing stolen Ethereum through Tornado Cash, a privacy-focused mixer used to obscure transaction trails. The volume of ETH moved—25,700 coins—was recorded within a short timeframe of two hours post-exploit.
Public records and investigative reporting attribute the exploit to an entity connected to North Korea. While the precise operational details of the Drift attack are documented in prior reports, this update focuses on the subsequent movement of funds via Tornado Cash. The amount moved represents only part of the total stolen value; estimates indicate the attacker still controls roughly $198 million in additional holdings.
Law enforcement and blockchain analysis groups continue to monitor the wallet’s activity. No charges have been publicly announced, and no official statements from authorities are included in this report. The use of Tornado Cash aligns with known patterns of post-theft fund mixing observed in prior cryptocurrency incidents.
