The Drift Foundation announced via X that approximately $295.4 million in user funds were stolen in a hacking incident that occurred on April 1, and the attacker was identified as a North Korean-linked hacking group. The foundation stated, "The Drift Foundation has been investigating the incident and tracking fund movements with Mandiant, zeroShadow, and SEAL 911, and Mandiant has identified the attacker as North Korean threat group UNC6862. The stolen funds were bridged to the Ethereum network, with a total of approximately 130,259 ETH stored in four wallets. Of these, 107,165 ETH in three wallets have not moved to date. In the remaining wallet, approximately 23,094 ETH moved to Tornado Cash on July 23. The stolen funds frozen to date amount to approximately $9.2 million. The Drift Foundation is collaborating with law enforcement agencies and zeroShadow to track related wallets and fund movements, and any recovered funds will be transferred to the DFX recovery pool."
