About $295 million in user assets were stolen, Drift Foundation says 107,200 ETH has still not been moved

Odaily report: According to monitoring by the Drift Foundation, the Drift Foundation has announced progress on fund recovery related to the security incident on April 1: approximately $295 million in user assets were stolen. The foundation has hired Mandiant, zeroShadow, and SEAL 911 to conduct an investigation and trace the funds, and Mandiant has identified the attacker as the North Korean threat group UNC6862.

The stolen funds were subsequently bridged to Ethereum, with approximately 130,300 ETH distributed across 4 wallets. Three of the wallets have not moved any funds to date, collectively holding 107,200 ETH; the other wallet transferred approximately 23,100 ETH to Tornado Cash on July 23.

At present, approximately $9.2 million in stolen funds has been frozen. The related funds had previously been transferred through Tornado Cash in August, and unfreezing and return still require cooperation with legal procedures. The Drift Foundation will transfer all assets recovered through freezing, bounties, or law enforcement channels into the DFX recovery pool, and is evaluating the subsequent path of the DRIFT token within the broader ecosystem. In addition, the foundation has partnered with Bybit to launch a public bounty program, offering a 10% bounty for funds successfully recovered.