Crypto Security: Drift Exploiter Laundering $200M+ via Tornado, ZachXBT Flags Hyperliquid Monero Pipeline
The Drift Protocol exploiter has now sent $61M more ETH into Tornado Cash and still holds $139M. Separately, ZachXBT uncovered a $20M+ Monero laundering operation on Hyperliquid tied to ransomware and multiple hacks.
What we know
An account on X updated: the Drift Protocol exploiter (who stole $270M+) deposited another 24,885 ETH ($61.3M) into Tornado Cash after two months of inactivity and still holds 56,569 ETH ($139.3M). Separately, another account on X reported ZachXBT uncovered 'FreedomXMR' — a Monero laundering pipeline on Hyperliquid Core that has taken in $20M+ since August, with funds traced to ransomware, malware, social engineering, and exploits including DCENT Wallet, Fetch, and Gamdom. A large SOL whale (HoYd72) also deposited 240,000 SOL ($25.3M) across major exchanges in 24 hours — a notable distribution signal.
How the story developed
The Drift Protocol exploiter has now sent $61M more ETH into Tornado Cash and still holds $139M. Separately, ZachXBT uncovered a $20M+ Monero laundering operation on Hyperliquid tied to ransomware and multiple hacks.
The Drift Protocol hacker, who stole over $270M, has resumed activity after 2 months of dormancy, depositing $61.56M in ETH into Tornado Cash while still holding $195M.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.