Stolen Ethereum Laundering Resumes After Drift Protocol Hack
Wallets linked to the Drift Protocol hack resumed laundering 25,700 ETH ($61.56M) via Tornado Cash on October 20, 2026. The April 2026 hack resulted in a $285M theft. Attackers still hold 81,864 ETH ($195M). Drift's recovery fund covers 1% of user losses.
How this was made

The 30-second read
Why it matters
The fresh movement of 25,700 ETH through Tornado Cash is the largest laundering burst reported since the hack, indicating continued control by the attackers and raising regulatory attention.
Market read
New on‑chain activity suggests ongoing risk for Ethereum privacy concerns and may affect short‑term sentiment toward ETH and related DeFi projects.
What to watch
Potential law‑enforcement actions or future freezes of the funds could reverse any price impact.
Background
The Drift Protocol, a Solana‑based DeFi platform, suffered a $285 million hack in April 2026. Attackers have been using Tornado Cash to launder stolen ETH.
Ticker impact
Wallets linked to the Drift Protocol hack resumed laundering 25,700 ETH through Tornado Cash on Oct 20, a fresh on‑chain activity first reported here.
likely modest upward pressure as market watches mixer usage and potential regulatory scrutiny.
The large volume of ETH moved through a known mixer is new information that could affect sentiment toward ETH, but the impact is limited to short‑term speculation.
Market effects
Highlights ongoing use of privacy mixers in the crypto ecosystem, may prompt tighter compliance focus for DeFi platforms.
Global, with particular attention from regulators in jurisdictions monitoring illicit crypto flows.
Moderate, as Ethereum remains a major crypto asset and mixer activity can influence broader market perception.
Counterpoint
The laundering may be a one‑off event with limited lasting effect on ETH price; traders could ignore short‑term noise.
Key entities
- DeFi PlatformDrift Protocol
Decentralized derivatives platform on Solana that was hacked for $285 million.
- MixerTornado Cash
Privacy‑preserving Ethereum mixer used to obscure the source of stolen funds.



