Drift Protocol Exploiter Buys 1,195 ETH, Holds 130,262 ETH

The wallet linked to the Drift Protocol exploiter has reportedly added another 1,195 ETH to its holdings, lifting the total to an estimated 130,262 ETH, as on-chain analysts continue tracking one of the largest DeFi exploits of 2026.

Fresh ETH Buy Adds to the Exploiter-Linked Wallet

According to a single unconfirmed report, the Drift Protocol exploiter bought an additional 1,195 ETH for approximately $2.46 million in USDC  USDC +0.00% . The purchase represents a continuation of the wallet’s pattern of converting stolen assets into Ether through USDC intermediaries.

The incremental buy follows a far larger consolidation. On April 2, 2026, on-chain monitoring firm Lookonchain reported that the exploiter had swapped all stolen assets worth over $270 million into 129,066 ETH, valued at roughly $273 million at the time. That earlier consolidation was also covered in detail as it unfolded. The additional 1,195 ETH purchase, if confirmed, would bring the wallet to 130,262 ETH.

Wallet Holdings Now Stand at an Estimated 130,262 ETH

At current prices near $2,043, a 130,262 ETH position would be worth approximately $266 million. The headline figure of the wallet being worth “$26…” appears to reference a truncated version of that valuation, though the exact figure could not be independently verified.

The scale dwarfs the initial on-chain breadcrumbs. On April 1, Lookonchain first flagged the exploiter swapping stolen funds into USDC, bridging them to Ethereum, and purchasing 19,913 ETH worth about $42.6 million. Within roughly 24 hours, the full conversion to 129,066 ETH was complete.

The rapid consolidation into a single asset on Ethereum’s mainnet sets this apart from exploits where attackers spread funds across dozens of wallets and tokens. That concentrated ETH position has also raised concerns about potential ETH liquidation risk on leveraged platforms should the attacker begin offloading.

Why the Market Is Watching This Address

The wallet traces back to a breach that Bloomberg Law reported drained nearly $285 million from the Solana  SOL +0.00% -based perpetual futures protocol Drift. Security firm PeckShield and multiple data-analytics firms confirmed the figure, with Bloomberg noting that some stolen crypto was initially converted into USDC before being bridged cross-chain.

Drift itself confirmed on April 2 that a malicious actor gained unauthorized access through a novel durable-nonce attack that rapidly took over the protocol’s Security Council administrative powers. The day before, the team had warned users not to deposit funds while it investigated unusual activity.

The DRIFT token reflected the damage, trading at roughly $0.0486 and down 31.59% over 24 hours at last check. Broader crypto sentiment offered no cushion, with the Fear & Greed Index sitting at 12, deep in “Extreme Fear” territory.

No regulatory action or asset freeze from Circle has been publicly confirmed as of April 2, despite the known conversion of stolen funds through USDC. The absence of a freeze notice has drawn criticism from industry figures questioning Circle’s response and remains an open question for observers tracking the incident.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.