According to blockchain analytics platform Lookonchain, wallets linked to the Drift Protocol hack transferred 25,700 Ether (worth $61.56 million) to Tornado Cash on October 20. The deposits occurred over a two-hour period, marking renewed activity from the attacker approximately two months after the April 1 assault that resulted in $295 million in losses.
Lookonchain estimated that wallets associated with the attacker still held approximately 81,864 ETH, valued at $195 million, following the transactions. The movement through Tornado Cash, a privacy-mixing service, complicates asset tracing but does not eliminate investigators' ability to identify associated wallets through transaction timing and clustering analysis.