Wallets linked to the attacker behind April’s “Drift” exploit send additional large amounts of Ethereum to Tornado Cash in ongoing activity over the past two days. Cointelegraph reports an Ether transfer of $109 million in two days, while Decrypt reports a $61 million transfer routed through the mixer in a shorter window.
Across the coverage, outlets connect the behavior to the April 1 hack, described as causing about $295 million in losses. Decrypt emphasizes a rapid outflow through Tornado Cash and says the attacker still controls a substantial remaining balance, while Cointelegraph and Decrypt both describe continuing holdings after the latest transfers. Cointelegraph also notes that linked wallets still hold sizable Ether amounts even after sending more to the mixer, and frames the reporting around earlier attribution work. Decrypt and Cointelegraph both refer to attribution linking the exploit to a North Korea-linked attacker, including prior reporting from Mandiant. The main differences are the specific transfer totals and the timing windows highlighted, not the overall pattern of laundering via Tornado Cash.
