Drift Foundation has released an update on recovery efforts tied to its April 1 security incident, saying roughly $295.4 million in user assets was stolen. The foundation said it hired Mandiant, zeroShadow, and SEAL 911 to investigate the attack and trace the funds. Mandiant identified the attacker as North Korean threat group UNC6862.
According to the update, the stolen assets were later bridged to Ethereum and split across four wallets holding about 130,259 ETH in total. Three of those wallets, containing a combined 107,165 ETH, have not moved any funds so far. A fourth wallet transferred about 23,094 ETH to Tornado Cash on July 23.
The foundation said about $9.2 million in stolen funds has now been frozen. Those funds had previously moved through Tornado Cash in August, though any unfreezing and return process will still require legal coordination. Drift Foundation also said any assets recovered through freezes, bounty efforts, or law enforcement will be sent to the DFX recovery pool. In parallel, it is evaluating the future path of the DRIFT token across the broader ecosystem. The foundation has also launched a public bounty program with Bybit, offering a 10% reward on successfully recovered funds.
Drift Foundation said it has frozen about $9.2 million in stolen funds as it provided an update on recovery efforts tied to its April 1 security incident, in which roughly $295.4 million in user assets was stolen.
The foundation said it brought in Mandiant, zeroShadow, and SEAL 911 to investigate the incident and track the funds. Mandiant identified the attacker as North Korean threat group UNC6862.
Stolen assets were bridged to Ethereum and split across four wallets
According to the foundation, the stolen funds were later bridged to Ethereum, where about 130,259 ETH was distributed across four wallets.
Three of those wallets have not recorded any transfers so far and still hold a combined 107,165 ETH. The fourth wallet moved about 23,094 ETH into Tornado Cash on July 23.
Frozen funds still face legal procedures before return
The foundation said about $9.2 million in stolen assets has been frozen. It added that those funds had previously been transferred through Tornado Cash in August, while any unfreezing and return of the assets will still require legal procedures.
Recovered assets will go to the DFX recovery pool
Drift Foundation said all assets recovered through freezes, bounty programs, or law enforcement channels will be transferred to the DFX recovery pool. It also said it is evaluating the next path for the DRIFT token across the broader ecosystem.
In addition, the foundation said it has partnered with Bybit to launch a public bounty program offering a 10% reward on funds that are successfully recovered.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
