# Drift Exploiter Moves About $63 Million of Ether Into Tornado Cash After Two Months Idle

The wallet made 258 deposits totaling about 25,700 ETH on October 20, and the attacker still controls roughly 81,454 ETH from the April hack that investigators attribute to North Korea.

- Published: 2026-10-21T05:37:25.162Z
- Canonical: https://polylog.news/crypto/2026-10-21/drift-exploiter-moves-about-63-million-of-ether-into-tornado
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CryptoSlate](https://cryptoslate.com/drift-hacker-washes-63m-through-tornado-cash-leaving-recovery-claims-in-limbo/), [crypto.news](https://crypto.news/drift-exploiter-tornado-cash-eth/), [TRM Labs](https://www.trmlabs.com/resources/blog/north-korean-hackers-attack-drift-protocol-in-285-million-heist), [crypto.news (attack analysis)](https://crypto.news/drift-protocols-285m-hack-exposes-social-engineering-threat-to-solana-defi/)

The address Etherscan labels "Drift Exploiter 5" made 258 deposits into Tornado Cash on October 20 and left itself nearly empty. The address had been inactive for about two months. crypto.news reports that about 25,700 ETH went in over two…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-21/drift-exploiter-moves-about-63-million-of-ether-into-tornado (subscription information: https://polylog.news/pricing).