Wallet Linked to Drift Exploit Sends $61 Million in Ethereum to Tornado Cash
What Decrypt reports, why it matters and what remains unconfirmed.

The story in one view
- Reported by
- Decrypt
- Coverage lens
- Security and resilience
- Published
- Evidence status
- Single attributed publisher report
What Decrypt reports
The North Korea-linked attacker behind April's $295 million Drift heist pushed 25,700 ETH through the mixer in two hours, and still controls roughly $198 million more.
The immediate significance
The report describes direct security exposure for users, funds or software. The immediate significance is the potential harm; the confirmed scale and any protective action require technical or primary evidence beyond the publisher summary.
What remains unknown
- The publisher summary does not contain the complete victim, transaction or technical evidence.
- The report does not establish the final loss or exposure, or whether remediation is complete.
- No matched primary document independently supporting the central claim is linked to this page.
The named assets, right now
Spot quotes from Kraken, checked .
Related Articles And Podcast
Further reporting and analysis on this story.

Ethereum’s new north star: privacy first, quantum-safe by design
The priorities move Ethereum’s debate from near-term scaling towards the network’s long-term survival and usability.
Read the full articleThe $350,000 Crypto Sting: How ZachXBT Infiltrated a North Korea-Linked Laundering Network | Daily Crypto Deep Dive
What happens after somebody steals more than a billion dollars in cryptocurrency?
Read the notes and play the episode
