Skip to content
Drift Protocol Hack: $285M Stolen Funds Transferred After Months of Dormancy

Drift Protocol Hack: $285M Stolen Funds Transferred After Months of Dormancy

First seen 26 Jul 2026, 05:02 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 27, 2026 at 04:03 UTC
  • •The Drift Protocol hack resulted in a loss of $285 million due to social engineering tactics.
  • •Stolen funds are being laundered through Tornado Cash, a method associated with North Korean hackers.
  • •The recent transfers represent the first significant movement of stolen assets in four months.

In April 2026, the Drift Protocol was hacked, leading to a loss of approximately $285 million. The Ethereum wallet known as 'Drift Exploiter 4' began transferring these stolen funds on July 25, 2026, with significant amounts sent to Tornado Cash and Bybit. Blockchain security firm PeckShield reported that $44.4 million in 23,095.1 ETH was moved to Tornado Cash, while a smaller transfer of 0.85 ETH went to Bybit. Investigators suspect the operation is linked to North Korean state hackers, as the laundering patterns align with known tactics. The attack was attributed to a social engineering campaign rather than a flaw in the smart contracts. The funds' movement marks the first significant activity in four months, raising concerns about further cash-out attempts. The incident has severely impacted Drift's total value locked, reducing it by over 50%.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 90d ago How this analysis works

Timeline

2026-04-01
Drift Protocol hacked
Hackers exploited Drift Protocol, stealing approximately $285 million in assets.
Cryptonews
2026-07-25
Funds transferred to Tornado Cash
$44.4 million in 23,095.1 ETH was sent to Tornado Cash from the Drift exploiter wallet.
Cryptonews
2026-07-25
Small transfer to Bybit
A separate transfer of 0.85 ETH to Bybit was identified, possibly as a test transaction.
Cryptonews
2026-07-26
Funds movement reported
The movement of stolen funds marks the first significant activity in four months, raising concerns.
Cryptonews

More articles in this cluster (2)

Following this threat?

Track Drift Protocol in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed