Additional analysis from TRM Labs identified multiple signals consistent with DPRK-linked activity, including the use of Tornado Cash, coordinated transaction timing, and rapid post-hack fund movement. The Drift Protocol incident is currently the largest DeFi exploit of 2026, with its impact spreading across at least 20 affected projects.

If attribution is confirmed, this would mark the 18th DPRK-linked crypto incident tracked in 2026, pushing total losses for the year above $300 million. According to data from Chainalysis, North Korean-linked groups stole over $2 billion in 2025 alone, highlighting the scale and persistence of these operations.