A wallet linked to the Drift Protocol exploit transferred 25,700 Ether, valued at approximately $60.5 million, to Tornado Cash on Tuesday. The transfer occurred over a two-hour period, following two months of dormancy from the exploiter's addresses.

Addresses connected to the exploiter still control about 81,454 Ether, valued at approximately $194 million, according to blockchain analytics platform Arkham.

The funds originated from the April 1 hack on Drift Protocol, a perpetual futures exchange built on Solana, which resulted in approximately $295 million in losses. In June, cybersecurity firm Mandiant attributed the attack to UNC6862, identified as a North Korean threat group.

In response, Drift initiated claims and redemptions for DFX recovery tokens on Oct. 1. These tokens provide affected users with a claim on a recovery pool, which launched with approximately $3.1 million and is augmented by exchange revenue and any recovered assets.

Tornado Cash operates as a cryptocurrency mixer that obscures transaction trails by commingling funds from multiple sources. Blockchain analytics platform Lookonchain first reported the Ether deposits to the privacy mixer.