A wallet linked to the April attack on Solana-based decentralized exchange Drift has transferred Ether worth about $109 million to Tornado Cash over two days, according to reporting by Cointelegraph.
The latest transaction took place Wednesday, when the wallet sent 18,800 ETH, valued at approximately $46 million at the time. A day earlier, the same exploiter-linked wallets had moved about $61 million in Ether to the cryptocurrency mixer. Blockchain data tracker Onchain Lens reported the combined transfers as 44,510 ETH.
The movement represents nearly 37% of the $295 million stolen from Drift in the April 1 exploit. Tornado Cash is a service designed to mix cryptocurrency transactions, making it more difficult to follow the movement of funds on a public blockchain. Transfers into such a service can therefore complicate efforts to trace assets connected with a hack.
What happened to the stolen funds
After Wednesday’s transfers, wallets labelled by blockchain intelligence firm Arkham as being linked to the exploiter still held 56,569 ETH, worth roughly $138 million, according to the source material.
The remaining balance means a substantial portion of the assets associated with the attack had not been sent to Tornado Cash as of the reported transactions. The figures reflect the Ether holdings identified in those wallets and their approximate value at the time of reporting.
Drift is a decentralized exchange, or DEX, built on Solana. DEXs allow users to trade digital assets through blockchain-based systems rather than through a conventional centralized exchange. Drift reported losses of about $295 million from the April 1 hack.
Background on the Drift recovery effort
The attack is ranked as the third-largest crypto hack of the year by DeFiLlama. Drift’s security consultant, Mandiant, attributed the incident to a North Korean threat group.
The exchange opened claims and redemptions for DFX recovery tokens on Oct. 1. The tokens give affected users a claim on a recovery pool that launched with about $3.1 million. That pool also receives revenue generated by the exchange and any funds recovered from the exploit.
The latest transfers are significant for that recovery process because Ether moved into a mixer may be harder for investigators and the affected platform to track. The source material does not state whether any of the funds sent to Tornado Cash have been recovered.
Moneyiar market picture
Moneyiar data at 10:59 a.m. on Oct. 21, 2026, showed Ethereum at $2,454.9449964229, up 3% over 24 hours but down 1.97% over seven days.
Other listed assets were also higher over the previous 24 hours: Chainlink was $12.3297821253, up 3.57%; Plasma was $0.0799292518, up 6.82%; and Rootstock Infrastructure Framework was $0.0757786296, up 2.54%. Their seven-day changes were -4.49%, -1.8% and -7.26%, respectively.
