Security firm Salus said wallets linked to the Drift Protocol attack moved 4,600 ETH into Tornado Cash on Oct. 21, worth about $11.23 million in the estimate cited by BlockBeats.
Wallet activity
Salus said two associated wallets had sent a combined 30,310 ETH to Tornado Cash. An address beginning 0xaa8 had previously deposited 19,600 ETH and then another 6,110 ETH, for 25,710 ETH in total. A second address beginning 0xd3f became active after about 202 days and deposited 4,600 ETH in 46 transfers over roughly 19 minutes.
Funding trail and limits
The Salus monitoring cited by the flash said the 0xd3f address had received about 24,882 ETH through 11 wallets, with funds mainly coming from USDC bridged from Solana through CCTP and swapped into ETH. It still held about 20,286 ETH when monitored.
BlockBeats linked the observations to a Salus post but did not provide full wallet addresses or transaction hashes. The “Drift attacker” label and the dollar value are therefore source-attributed descriptions, not independent proof of wallet ownership or a precise cash amount.