Drift Protocol Hack: $285M Stolen Funds Transferred After Months of Dormancy

In April 2026, the Drift Protocol was hacked, leading to a loss of approximately $285 million. The Ethereum wallet known as 'Drift Exploiter 4' began transferring these stolen funds on July 25, 2026, with significant amounts sent to Tornado Cash and Bybit. Blockchain security firm PeckShield reported that $44.4 million in 23,095.1 ETH was moved to Tornado Cash, while a smaller transfer of 0.85 ETH went to Bybit. Investigators suspect the operation is linked to North Korean state hackers, as the laundering patterns align with known tactics. The attack was attributed to a social engineering campaign rather than a flaw in the smart contracts. The funds' movement marks the first significant activity in four months, raising concerns about further cash-out attempts. The incident has severely impacted Drift's total value locked, reducing it by over 50%.

Key Points: • The Drift Protocol hack resulted in a loss of $285 million due to social engineering tactics. • Stolen funds are being laundered through Tornado Cash, a method associated with North Korean hackers. • The recent transfers represent the first significant movement of stolen assets in four months.