Critical information of parties related to the exploit have been identified. Drift is now sending an on-chain message from 0x0934faC45f2883dd5906d09aCfFdb5D18aAdC105 to the ETH Wallets that holds the stolen funds.

Wallet 1: 0xAa843eD65C1f061F111B5289169731351c5e57C1 (Timestamp of message: Apr-03-2026 05:17:23 AM +UTC)

Wallet 2: 0xD3FEEd5DA83D8e8c449d6CB96ff1eb06ED1cF6C7 (Apr-03-2026 05:20:59 AM +UTC)

Wallet 3: 0xbDdAE987FEe930910fCC5aa403D5688fB440561B (Apr-03-2026 05:23:11 AM +UTC)

Wallet 4: 0x0FE3b6908318B1F630daa5B31B49a15fC5F6B674 (Apr-03-2026 05:25:11 AM +UTC)

We are ready to speak.

Please reach out via Blockscan chat.

To the community, Drift will share further updates as soon as third-party attributions are completed.