Unattributed: Exploit

The April 1 hack caused about $295 million in losses and was later attributed to a North Korean threat group in a Mandiant investigation.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://cointelegraph.com/news/drift-exploiter-eth-tornado-cash
• https://crypto.news/drift-exploiter-tornado-cash-eth/

Record history

First seen: 2026-10-20T10:19:03.000Z. Last updated: 2026-10-20T16:51:53.333Z. Revision: 1.