KanalCoin Logo
BTC$63,923.10-1.40%
ETH$1,857.84-1.83%
USDT$1.00-0.04%
BNB$559.90-1.15%
USDC$1.00+0.00%
XRP$1.09-1.59%
SOL$73.90-3.18%
TRX$0.33+1.26%
HYPE$58.68-1.84%
DOGE$0.07-2.02%
BTC$63,923.10-1.40%
ETH$1,857.84-1.83%
USDT$1.00-0.04%
BNB$559.90-1.15%
USDC$1.00+0.00%
XRP$1.09-1.59%
SOL$73.90-3.18%
TRX$0.33+1.26%
HYPE$58.68-1.84%
DOGE$0.07-2.02%

Drift Protocol Exploiter Deposits 23,095 ETH Into Tornado Cash

Nakamura Haruto
Nakamura Haruto
Contributor
Published Jul 24, 2026
2 min read
Drift Protocol Exploiter Deposits 23,095 ETH Into Tornado Cash
Featured image: Drift Protocol Exploiter Deposits 23,095 ETH Into Tornado Cash
Summary

The Drift Protocol exploiter has deposited 23,095 ETH into Tornado Cash, moving a large tranche of funds tied to the earlier attack into the Ethereum mixing service. The actor remains identified only as the exploiter behind the Drift Protocol breach.

The Drift Protocol exploiter has deposited 23,095 ETH into Tornado Cash, moving a large tranche of funds tied to the earlier attack into the Ethereum mixing service. The actor remains identified only as the exploiter behind the Drift Protocol breach.

On-chain tracking flagged the transfer from the address associated with the exploit, visible on Etherscan. The movement was surfaced by blockchain monitor OnchainLens, which tracks wallets linked to the incident. For related coverage, see Gemini Sends $10M in Bitcoin to Trump PAC After CFTC Motion.

ON-CHAIN DATA

  • Amount: 23,095 ETH
  • From: Drift Protocol exploiter address (0xaa84…57c1)
  • To: Tornado Cash

Why the Tornado Cash Deposit Matters

Depositing into Tornado Cash routes funds through a mixer that breaks the on-chain link between source and destination addresses. For observers tracking the Drift case, the deposit marks a shift from holding to obscuring the funds.

The transfer follows earlier on-chain activity from the same actor, including a stretch in which the exploiter accumulated ETH and grew the wallet to 130,262 ETH. Moving 23,095 ETH into a mixer signals a change in how the actor is now handling that balance.

The Drift breach itself was previously reported as a $285 million exploit with suspected DPRK links, and blockchain analytics firm Elliptic tied the attack to suspected North Korean hackers. The mixer deposit is consistent with the fund-obscuring behavior associated with that profile, though attribution of this specific transaction is not independently confirmed here.

What to Watch Next for Drift Protocol and the Market

Drift has published an incident recovery update covering its response to the exploit. Any further statement on the mixer deposit and fund tracing will be the immediate item to watch.

Downstream parties affected by the breach, such as the first known casualty of the reported exploit, add pressure for continued fund tracking. Whether analysts can follow the funds beyond Tornado Cash remains the open question.

TLDR KEYPOINTS

  • The Drift Protocol exploiter deposited 23,095 ETH into Tornado Cash.
  • The funds came from the address linked to the earlier Drift exploit, tracked on Etherscan.
  • Watch for official responses and further fund-tracing updates as the funds move through the mixer.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.

Suggested Reads

More ยป