Drift hacker associated address funds originate from Backpack, or leave KYC-related clues.

SmartContractAuditor · 2026-04-02T02:31:08+00:00

SendAI's developer Aryan posted on X stating that suspicious activity by Drift attackers has been detected on the chain, involving fund transfers and money laundering, and related to Backpack's KYC, implying that these suspicious accounts may have undergone identity verification.

SmartContractAuditor

2026-04-02 02:31:08

Abstract generation in progress

Odaily Planet Daily News: SendAI developer aryan posted on X saying: “I found some interesting clues on-chain: the Drift attacker address (HkG…ZES) obtained funds through Near Intents 8 days ago, but after that it had no activity until it suddenly received a large amount of funds from the Drift vault; the attacker then transferred/exchanged these funds to money-laundering addresses (8ub…Gxw) and several other addresses, and all of these addresses only received funds yesterday via Backpack—this is interesting, because it likely means Backpack performed KYC on these accounts; next, these money-laundering addresses transferred the funds via Wormhole to an Ethereum address, and this Ethereum address previously received funds via Tornado Cash.”

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes