Drift Protocol Attacker Moves 25,700 ETH to Tornado Cash After 2-Month Silence

The return to Tornado Cash after a two-month pause matters less for the amount moved than for the signal: the actor is resuming an established laundering pattern rather than holding indefinitely, while the bulk of the stolen ETH remains parked in the same address. That split — a relatively small share routed through a mixer against a much larger dormant balance — is the detail worth tracking, since it hints at deliberate pacing rather than urgency. Whether the remaining holdings stay untouched or follow the same channel is the open question for anyone monitoring on-chain flows tied to the incident.