Drift Foundation said about $9.2 million linked to the April 1 theft of roughly $295.4 million has been frozen, though recovery still requires law-enforcement procedures. The stolen assets were moved across chains to Ethereum, where about 130,259 ETH was distributed among four wallets. Three wallets holding approximately 107,165 ETH have not moved the funds, while a fourth transferred about 23,094 ETH to Tornado Cash (a crypto transaction-mixing service) on July 23. Mandiant identified the attacker as UNC6862, a North Korea-linked threat organization. Recovered funds will go to the DFX compensation pool, and Drift Foundation has launched a public bounty with Bybit offering 10% of successfully recovered funds. Plans for the DRIFT token remain under evaluation.