The Drift Foundation has released an update on efforts to recover funds stolen in its April 1 security incident, saying about $295.4 million in user assets was taken. The foundation said it hired Mandiant, zeroShadow, and SEAL 911 to investigate the attack and trace the funds. Mandiant identified the attacker as North Korean threat group UNC6862, according to the update.
The stolen assets were later bridged to Ethereum and spread across four wallets holding about 130,259 ETH in total. Three of those wallets, which together hold 107,165 ETH, have not moved funds so far. A fourth wallet transferred about 23,094 ETH to Tornado Cash on July 23.
Drift said roughly $9.2 million in stolen funds has now been frozen. Those assets had previously moved through Tornado Cash in August, and the foundation said any unfreezing and return of funds will still require legal procedures. The foundation added that any assets recovered through freezes, bounty programs, or law enforcement channels will be sent to the DFX recovery pool. It is also evaluating the future path of the DRIFT token across the broader ecosystem. In addition, Drift said it has worked with Bybit to launch a public bounty program that offers a 10% reward on successfully recovered funds.
The Drift Foundation has released an update on fund recovery efforts tied to its April 1 security incident, saying about $295.4 million in user assets was stolen.
The foundation said it has hired Mandiant, zeroShadow, and SEAL 911 to investigate the case and trace the funds. According to the update, Mandiant identified the attacker as North Korean threat group UNC6862.
Stolen funds were bridged to Ethereum
The foundation said the stolen assets were later bridged to Ethereum, where about 130,259 ETH was distributed across four wallets.
Three of those wallets have not moved funds so far and together hold 107,165 ETH. Another wallet transferred about 23,094 ETH to Tornado Cash on July 23.
About $9.2 million has been frozen
Drift said about $9.2 million in stolen funds has been frozen at this stage. The foundation added that the affected funds had previously moved through Tornado Cash in August, while any unfreezing and return of those assets will still need to go through legal procedures.
Recovered assets to go to the DFX recovery pool
The foundation said all assets recovered through freezes, bounty programs, or law enforcement channels will be transferred to the DFX recovery pool. It also said it is assessing the future path of the DRIFT token across the broader ecosystem.
Drift added that it has partnered with Bybit to launch a public bounty program, offering a 10% reward on funds that are successfully recovered.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
