A wallet suspected of being linked to the Drift protocol exploit has moved $61.6 million worth of Ethereum into Tornado Cash, roughly two months after the alleged incident that first put the address under scrutiny.
Suspected Drift exploiter sends $61.6 million in ETH to Tornado Cash
On-chain data shows the wallet at address 0x22aaA7…5C2C routing a large sum of Ether into Tornado Cash. Tornado Cash is a privacy tool built on Ethereum that pools deposits from many users, then allows withdrawals to fresh addresses, making it difficult to trace where the funds originated. For related coverage, see NEAR Protocol ($NEAR) Review 2026: I Clicked Through Everything So You Don't Have To.
The wallet has not been officially confirmed as belonging to any individual. Blockchain researchers and security observers describe the connection to the Drift exploit as suspected, not proven. The “suspected exploiter” label is an inference based on transaction patterns, not a legal identification.
This is not the first time wallets linked to the suspected Drift incident have used Tornado Cash. Earlier movements saw a suspected Drift exploiter route 23,095 ETH through Tornado Cash, and separately, a wallet labeled “Drift Exploiter 5” send 25,710 ETH to the same mixer. Combined with this latest movement, the total across multiple transactions is substantial, with Drift exploiter-linked wallets previously sending $109 million to Tornado Cash before this latest transfer.
The transfer comes two months after the alleged Drift incident
The timing is what makes this movement notable. Two months is a pattern observers have noted in past crypto exploit cases, as it allows immediate attention to die down before funds are moved. That observation is not proof of wrongdoing by any specific person.
Drift is a decentralized trading protocol built on the Solana blockchain. After the alleged exploit, the platform opened a process for affected users to file recovery claims. That Drift recovery claims process was initially set at 1% of verified losses, indicating the scale of the shortfall between available funds and what users reportedly lost.
Why the Tornado Cash transfer is being watched
Think of Tornado Cash like a cash-mixing service: money goes in from one wallet, and an equivalent amount comes out to a different wallet, breaking the on-chain trail. The US Treasury’s Office of Foreign Assets Control sanctioned Tornado Cash in August 2022, citing its use in laundering more than $7 billion in cryptocurrency since 2019.
Using a privacy mixer does not, by itself, prove the sender committed a crime. Privacy tools have legitimate uses, and the wallet flagged here carries a “suspected” label precisely because the link to the Drift incident has not been confirmed by any authority.
What observers can say is that a large sum of ETH from a wallet under scrutiny has now been routed through a protocol specifically designed to obscure transaction origins. That fact alone explains why the movement is drawing attention from the on-chain security community.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always conduct your own research before making any decisions.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
