Drift Opens Hack Claims at Just 1 Cent Per Dollar

DFX redemptions burn future recovery claims

The immediate consequence is illustrated by a 10,000-USDT verified loss. At the published launch rate, redeeming all 10,000 DFX would return about 104 USDT, or 1.04%, and eliminate those tokens’ participation in later distributions.

That calculation leaves 9,896 USDT unreimbursed relative to the original loss. It is an example using the announcement’s rate, not a wallet-specific quote or an estimate of the eventual outcome.

Unchained’s October 2 report explains that claims require the wallet controlling the account at the time of the incident. After issuance, a holder can redeem from another wallet, transfer the tokens or trade them on a secondary market.

The distinction separates receiving a claim from accepting a payout. A claim records entitlement in token form; redemption converts that entitlement into the pool’s current USDT value and ends it for the amount burned.

The official portal also separates DFX from Insurance Fund withdrawals. It says those depositor assets were unaffected and can be returned in full. The low DFX payout should therefore not be applied to every balance associated with Drift.

Claims close at 00:00 UTC on January 1, 2028, with unclaimed tokens burned. The published issuance ceiling is about 299.5 million DFX. That denominator represents verified claims, while the theft estimate describes stolen assets; the two figures should not be treated as interchangeable loss measurements.

Nor is receiving DFX equivalent to acquiring the DRIFT governance token. The May recovery plan explicitly separated the recovery instrument from governance. A token’s name, transferable form and market price do not change the purpose of the claim it represents.

That plan placed the position snapshot at the April 1 protocol pause, 18:31:47 UTC. It explained that remaining spot assets would be converted to USDT because lending and borrowing markets shared liquidity, making direct returns to individual depositors incompatible with settling the pool’s obligations. These were proposed accounting arrangements, subject to governance, rather than a promise that each original asset would be returned in kind.

At an unchanged redemption rate, cashing out removes funds and tokens in the same proportion. For example, a pool with 100 USDT against 10,000 tokens has a 0.01-USDT rate. Redeeming 1,000 tokens removes 10 USDT, leaving 90 USDT against 9,000 tokens and the same rate. Burning claims alone does not create compensation money; subsequent deposits are needed to increase the payout per remaining token.

Drift’s $295M hack leaves funds frozen

The loss-impact check for this article, completed at 07:08 UTC on October 3, found substantial confirmed theft evidence, rather than only a technical vulnerability. Drift’s April asset accounting itemized approximately $295.7 million withdrawn across 19 asset categories, including about $159.3 million in JLP and $71.4 million in USDC.

Chainalysis’s April reconstruction estimated $285 million and documented admin-control transactions followed by vault drainage lasting roughly 2.5 hours. It described attackers using valid signatures to change permissions and accept artificially priced collateral.

Our earlier coverage of April’s crypto losses used that contemporaneous $285 million estimate. The fresh development is that recovery claims are now open, with an actual initial redemption rate, rather than another retelling of the breach.

The Foundation’s September 30 update put the theft at roughly $295.4 million, according to The Block’s October 2 account. It reported about $9.2 million frozen, requiring a law-enforcement order before funds can enter the recovery pool.

The same update described 107,165 ETH still held across three attacker wallets, while a fourth had moved about 23,094 ETH through Tornado Cash in July. Those are dated tracing observations, not an independently refreshed October 3 wallet audit or cash available to victims.

The reviewed disclosures do not provide a unique affected-user count. Four attacker wallets are not four victims, and frozen assets cannot be subtracted from losses as if users have already received them.

Drift’s June forensic update said Mandiant attributed the operation to UNC6862, a North Korean threat group. That is the protocol’s report of the forensic finding; the claims opening does not establish a new attack wave.

Velocity revenue must turn pledges into payouts

The recovery mechanism depends on exchange activity and asset recovery. Velocity, the rebuilt exchange formerly called Drift, sends part of net protocol revenue to the pool daily, with contribution rates rising across revenue bands, as Unchained reported.

The Block recorded a 3.11-million-USDT pool on October 2, about 2,250 USDT paid out and only 31 USDT from the first day’s revenue. It reported no dashboard contribution yet from Tether or strategic partners. These are that outlet’s dated observations, not current balances independently verified here.

Drift’s April framework described support of up to $127.5 million from Tether and $20 million from others. The package included a revenue-linked credit facility, an ecosystem grant and market-maker loans. Its headline amount was broader than an immediate deposit for victims.

The May plan also described revenue-dependent deployment. Commitments, trading liquidity and compensation cash therefore require separate accounting. Adding them together would overstate what a token holder can presently withdraw.

The operating model ties recovery to the rebuilt venue’s performance. Our Solana ecosystem analysis discusses how trading activity concentrates within applications; faster network transactions alone cannot finance the gap left by a protocol theft.

Source: Alternative.me, checked October 3. The Bitcoin-focused gauge reads 67, or Greed, versus 72 the previous day; it does not measure Drift’s recovery prospects.

No firm full-repayment date was disclosed in the launch announcement. The next measurable developments are actual pool contributions, legally released assets and resulting redemption quotes. Holding preserves exposure to those developments, but the timing and scale of future funding remain uncertain.