🌀 Drift hacker continues laundering funds for a second day, while victims may get back only about 1 cent?
Drift was hacked on April 1. After the hacker’s wallet lay dormant for two months, it became active again over the past two days.
According to Onchain Lens, around 44,500 ETH (about $109 million) was transferred to Tornado Cash over the two days:
🔹 October 20: around 25,700 ETH
🔹 October 21: around 18,800 ETH
🔹 One wallet split 19,600 ETH into 196 transactions of 100 ETH each—matching the mixer’s fixed-denomination pool exactly.
Drift attributed the attack to a North Korea-linked group that gained control through social engineering. Reports say the associated addresses still hold over $100 million worth of ETH that hasn’t been moved.
Even more painful is the compensation: victims can claim DFX recovery tokens. According to reports, they’ll receive about 1 cent for every 1 USDT lost, with a pool of around $3.1 million.
My take:
Laundering funds through Tornado Cash makes recovery seem increasingly unlikely. The people who ultimately bear the losses are ordinary users who deposited funds into the protocol. As for concerns that “the hacker will dump ETH,” sending funds to a mixer doesn’t mean they’ll be sold immediately. Don’t let a transfer alert scare you into selling at a loss.
Before depositing into DeFi, it’s more important to check how a protocol’s multisig and security committee are set up than to focus on APY.
Would you still keep a large amount of funds in a DeFi protocol long-term, or withdraw as soon as you’re done?
#Drift #ETH #DeFi安全 #TornadoCash
Drift was hacked on April 1. After the hacker’s wallet lay dormant for two months, it became active again over the past two days.
According to Onchain Lens, around 44,500 ETH (about $109 million) was transferred to Tornado Cash over the two days:
🔹 October 20: around 25,700 ETH
🔹 October 21: around 18,800 ETH
🔹 One wallet split 19,600 ETH into 196 transactions of 100 ETH each—matching the mixer’s fixed-denomination pool exactly.
Drift attributed the attack to a North Korea-linked group that gained control through social engineering. Reports say the associated addresses still hold over $100 million worth of ETH that hasn’t been moved.
Even more painful is the compensation: victims can claim DFX recovery tokens. According to reports, they’ll receive about 1 cent for every 1 USDT lost, with a pool of around $3.1 million.
My take:
Laundering funds through Tornado Cash makes recovery seem increasingly unlikely. The people who ultimately bear the losses are ordinary users who deposited funds into the protocol. As for concerns that “the hacker will dump ETH,” sending funds to a mixer doesn’t mean they’ll be sold immediately. Don’t let a transfer alert scare you into selling at a loss.
Before depositing into DeFi, it’s more important to check how a protocol’s multisig and security committee are set up than to focus on APY.
Would you still keep a large amount of funds in a DeFi protocol long-term, or withdraw as soon as you’re done?
#Drift #ETH #DeFi安全 #TornadoCash