Drift Protocol exploiter converts nearly all stolen SOL to ETH and bridges $277M across chains, consolidating assets on Ethereum.
Security & Exploits ·
An attacker behind the Drift Protocol exploit has converted nearly all stolen SOL holdings into Ethereum and bridged the proceeds across multiple blockchains. The consolidated position now stands at 130,000 ETH worth approximately $277 million, according to on-chain tracking. The movement represents a shift in asset strategy, with the exploiter moving away from Solana-based holdings toward liquidity on Ethereum.
The bridging activity suggests the attacker is consolidating stolen funds across chains rather than liquidating the full amount in a single market. By converting to ETH and distributing across networks, the exploiter may be attempting to reduce surveillance risk and enhance the ability to move capital without triggering detection mechanisms tied to large single-chain positions. The scale of the transfer—$277 million in bridged value—indicates substantial liquidity was available for the conversion.
What remains unclear is whether the attacker intends to liquidate the ETH holdings, hold them long-term, or use the consolidated position as collateral. The timing and mechanics of further movement, as well as any potential regulatory or on-chain intervention points, have not been disclosed. The addresses holding the funds and the specific bridge protocols used have not been detailed in available reports.