According to on-chain analyst Aryan (@_0xaryan), the Drift Protocol treasury was recently emptied. The attacker address [HkG...ZES] received initial funds via Near Intents eight days ago and remained inactive for an extended period before suddenly withdrawing a large sum from the Drift treasury. In terms of fund movement, the attacker transferred assets to multiple laundering addresses (including 8ub...Gxw), all of which received funds via the Backpack wallet the day before the incident. Subsequently, the launderers used the cross-chain protocol Wormhole to move the funds to an Ethereum address, whose origin traces back to Tornado Cash. In response, Backpack co-founder Armani Ferrante confirmed that the fund flow did not follow a direct "Backpack → Attacker" path, but rather an indirect route: "Backpack → Non-attacker (cross-chain intent solver) → Attacker," and stated that verification has been completed with the relevant account holders.
Drift Protocol hack funds traced via Backpack Wallet; KYC information may be key clue
TechFlowShare
Summary
A crypto hack targeting Drift Protocol saw the attacker address [HkG...ZES] drain the treasury after receiving funds via Near Intents. The protocol update revealed that assets were laundered through multiple addresses, including 8ub...Gxw, which had received funds via Backpack wallets. The funds were later transferred to Ethereum via Wormhole, with origins traced to Tornado Cash. Backpack co-founder Armani Ferrante noted that the transaction flow involved a third-party cross-chain solver, not a direct link to the attacker. Verification with account holders has been completed.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.