The attacker behind the Drift Protocol exploit has reportedly consolidated all stolen assets, valued above $270 million, into Ethereum. Unconfirmed reports place the total at 129,066 ETH, though the exact final balance has not been independently verified on-chain.
Drift Protocol Exploiter Converts the Full Haul Into ETH
On April 1, 2026, Drift Protocol warned users on X that it was observing unusual activity, was investigating the issue, and told users not to deposit funds. On-chain tracking account Lookonchain flagged more than $270 million in suspicious transfers sent to wallet HkGz4K during the incident.
Decrypt reported that roughly 41 million JLP tokens valued near $155 million were transferred from the Drift Vault to HkGz4K around 11:06 a.m. ET, with total transfers to the attacker exceeding $250 million according to Arkham data cited in that report. As covered in our earlier reporting on the Drift Protocol exploit that sent $270M in assets to HkGz4K, the scale of the breach placed it among the largest DeFi exploits of 2026.
ON-CHAIN DATA
- Transaction: 5brWcBQ...jSM8a
- Date: March 24, 2026
- Amount: 0.03000003 WSOL (~$2.36)
- From: Drift Vault → HkGz4K ("Drift Exploiter 1")
- Significance: Earliest known interaction between the attacker wallet and the Drift Vault, predating the main exploit by over a week
Solscan records confirm the attacker-linked wallet had prior interaction with the Drift Vault as early as March 24, when 0.03000003 WSOL moved from the vault to the address later labeled "Drift Exploiter 1." That small transfer, worth roughly $2.36 at the time, preceded the main drain by more than a week.
The Conversion to ETH
The Daily Hodl reported that Lookonchain tracked the exploiter swapping stolen assets into USDC, bridging them to Ethereum, and purchasing ETH. An earlier update placed the attacker's accumulation at 38,820 ETH, worth approximately $82.6 million at that stage.
According to unconfirmed reports, the exploiter has since completed the conversion, reaching a total of 129,066 ETH valued near $273 million. That figure has not been independently verified through a final destination wallet or transaction trail. At the current ETH spot price of $2,074.25, 129,066 ETH would be worth closer to $267.7 million, a gap the research has not reconciled.
DRIFT Token Collapses 37% as Market Reacts
The exploit's impact on Drift's native token has been severe. DRIFT fell 37.26% over 24 hours to $0.0425, according to CoinGecko data. ETH itself was roughly flat over the same period, down about 0.6%, trading near $2,074.
The broader market context remains risk-off, with the Fear and Greed Index sitting at 12, deep in "Extreme Fear" territory. The Drift incident added fuel to an already cautious mood across DeFi, where security-focused accounts dominated the social conversation.
What to Watch After the ETH Consolidation
The consolidation into a single asset, if confirmed, simplifies monitoring. Observers can now track one large ETH balance rather than a scattered mix of Solana-native tokens.
Future movements from the attacker wallet, whether dispersal across multiple addresses, attempts to interact with exchanges, or further bridging, will be the key signals. The reported balance of 129,066 ETH sets a clear benchmark for follow-up tracking by on-chain analysts like Lookonchain and Arkham.
Drift Protocol has not yet issued a post-incident report or announced any recovery plan. Readers following the situation can reference our latest ETF flow coverage for broader market context as crypto sentiment remains fragile.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.