A cryptocurrency wallet tied to the $285 million Drift Protocol hack stirred again 41 minutes ago, moving $44.4 million worth of Ethereum to Tornado Cash. This marks the first significant activity since the funds went quiet for four months.

The wallet, known as “Drift Exploiter 4” and tracked on Etherscan as 0xbDdAE987FEe930910fCC5aa403D5688fB440561B, belongs to a group linked to the exploit. Blockchain security firm PeckShield highlighted that about 23,095 ETH were split across several transactions to Tornado Cash, with a minor 0.85 ETH transfer also sent to Bybit.

This movement hints that laundering efforts tied to the hack have resumed. While no definitive proof connects the operation to North Korean-backed hackers, similar tactics and infrastructure have been spotted in DPRK-linked cases. Blockchain analysts continue to monitor the situation closely.

Drift, Solana’s largest perpetual futures platform, suffered the breach in April when attackers drained funds by exploiting the protocol rather than a smart contract loophole. The hack slashed Drift’s total value locked by more than half as thieves moved assets from Solana to the Ethereum network before going silent.