After about two months of silence, wallets linked to the April Drift Protocol exploit deposited 25,700 ETH into the Tornado Cash mixer on Tuesday. The transfers landed in 100 ETH and 10 ETH batches, matching the mixer's fixed deposit pools.

The 71 tracked exploiter addresses still hold 81,454 ETH, worth roughly $198M.

This is the second laundering round after a 23,095 ETH (about $44.4M at the time) deposit on July 23 and 24. The April 1 attack drained $295.7M from Drift's Solana vaults and was attributed by Mandiant to UNC6862, a North Korean threat group.

Drift, now relaunched as Velocity, opened claims for its DFX recovery token on Oct. 1. The recovery pool held about 3.1M USDT against roughly 299.5M in verified losses, so early redemptions paid about a penny on the dollar.