BlockBeats news, September 30: The Drift Foundation has disclosed progress on fund recovery related to the April 1 security incident, in which approximately $295.4 million in user assets were stolen. The foundation has engaged Mandiant, zeroShadow, and SEAL 911 to conduct investigations and trace the funds, with Mandiant identifying the attacker as the North Korean threat group UNC6862.
The stolen funds were subsequently bridged to Ethereum, with approximately 130,259 ETH distributed across 4 wallets. Three of these wallets have seen no transfers to date, collectively holding 107,165 ETH; the other wallet transferred approximately 23,094 ETH to Tornado Cash on July 23. The foundation stated that approximately $9.2 million in stolen funds have now been frozen. The relevant funds were previously moved through Tornado Cash in August, but unfreezing and return still require cooperation with legal procedures.
The Drift Foundation will transfer all assets recovered through freezing, bounties, or law enforcement channels into the DFX Recovery Pool and is evaluating the subsequent path of the DRIFT token within the broader ecosystem. In addition, the foundation has partnered with Bybit to launch a public bounty program, offering a 10% bounty on successfully recovered funds.

