Drift has reopened the claim process for DFX; the initial compensation is close to 1% of the verified losses.

Drift The foundation has opened DFX compensation and redemption services for the victims of the attack on April 1st. Currently, there are approximately 3.11 million USDT available for payment, with the initial compensation level being close to 1% of the verified losses.

• Wallets that meet the criteria can receive 1 DFX token for each verified loss of USDT in the attack incident.
• The initial redemption price is approximately DFX per coin for 0.0104 USDT. The tokens redeemed will be permanently destroyed.
• Sources of recovered funds include Velocity income, Tether support, partner capital, as well as any stolen assets that are recovered.
• The claim window will close on January 1, 2028, and by then, all unclaimed DFX tokens will be destroyed.

On October 1st, the Drift Foundation announced that affected users can now claim the tokens allocated to them, redeem them for USDT, or retain their share of future fund allocations. According to the launch terms, the total supply of DFX is approximately 299.5 million tokens, with no further new tokens to be issued.

DFX Only a small portion of the verified losses is required to be repaid.

According to the formula of the foundation, the redemption amount for each token is equal to the balance of USDT in the recovery pool divided by the circulating supply of DFX. Drift indicates that the initial exchange rate is about 0.0104 USDT per token, which means that for a claim representing a loss of 1,000 USDT, approximately 10.40 USDT can be redeemed initially.

For holders who choose to redeem, Drift indicates that the token destruction and the payment of USDT will be completed in the same transaction. Therefore, either both must be completed, or neither can be completed. The foundation's explanation also points out that redemption is the final step, and the payment amount will be rounded down to the nearest 0.000001 USDT.

According to the terms of launch, holders can also transfer DFX, or trade it on Raydium as it is a standard Solana token. The announced redemption amount determines the payment level of the fund pool, while sales in the secondary market depend on the trading price.

In the recovery plan on May 5th, Drift will separate its assets from its DRIFT governance tokens, and set a cumulative fund target of 295,426,725.97 USDT. The plan states that once the total inflow reaches this amount, income contributions will cease, and the remaining tokens can be redeemed at face value or for a higher value.

Drift stated in the launch notes that early redemption will result in holders losing their right to claim subsequent funding injections. They gave an example, saying that if 10% of the supply is destroyed, then each remaining token's share in future funding injections will increase by about 11%.

Claims must be made using the wallet recorded on April 1st.

For first-time claims, the foundation requires users to connect to the wallet that controls their Drift account on April 1st. The instructions also require a small amount of SOL to be retained in the wallet for network transaction fees, and users must accept the DFX terms before the claim transaction is approved.

According to the recovery method announced in May, Drift recorded the spot and perpetual contract positions of the protocol at 18:31:47 on April 1 ( UTC ) when it was paused. The same file uses the price from 16:06 ( UTC ), which is the price before the attack began, in order to avoid valuing the balance using prices that were distorted during the event period.

According to the information from October, any wallet holding DFX can be used for redemption, even if these tokens have been transferred out of the initial claiming addresses. The claim window will close on January 1, 2028, at 00:00 (UTC), and the foundation stated that all unclaimed tokens will be permanently destroyed by then.

In another update, Drift stated that its insurance fund remains intact, as the fund covers transactions-related bankruptcies, not the losses caused by this attack. A supplement to that update on July 7 made these deposits available for withdrawal, and a portal explanation in October clearly distinguished insurance fund claims from DFX.

Velocity revenue will provide daily capital injections to the recovery pool.

According to the new funding arrangement of Drift, Velocity will transfer a portion of the daily net income into the recovery pool at 00:00 (UTC) each day. The foundation stipulates that 60% of the income for the first 30,000 USDT, 70% of the income for the range of 30,000 to 100,000 USDT, and 90% of the income for amounts exceeding 100,000 USDT will be allocated to the recovery pool.

According to the announcement, each percentage only applies to the income within its respective range. Before calculating the protocol's net income, Velocity will first allocate 15% of the net transaction fees to its insurance fund, another 15% to the trading capital, and the remaining 70% will be considered as the protocol's net income.

The foundation stated that Tether has committed to providing up to 127.5 million USDT for restarts and user recovery; strategic partners have committed to providing up to 20 million USDT. In the framework document from April, Drift mentioned that this support package includes revenue-linked credit arrangements, ecosystem subsidies, and market maker loans.

For stolen assets, the recovery framework of Drift stipulates that funds recovered through freezing, rewards, or law enforcement actions will be placed into a recovery pool. Its May plan also announced a 10% reward for successfully recovered assets, with Bybit and other partners supporting this plan.

Previous reports tracked the stolen funds and the affected companies.

As reported by crypto.news on July 24th, a wallet related to this attack transferred funds through Tornado Cash after about three months of inactivity. Records from Etherscan and monitoring attributed to PeckShield show that since July 23rd, the total amount transferred amounted to 23,095.1 ETH, worth approximately 44.4 million US dollars.

In a report on April 5th regarding Drift suffering from a social engineering attack campaign that lasted for several months, the protocol stated that the attackers impersonated representatives of a quantitative trading company and contacted contributors around October 2025. According to their investigation, after multiple meetings in industry events, the attackers distributed malicious links and tools.

For U.S. law enforcement agencies, crypto theft related to North Korea has also prompted them to publicly seek assistance from the industry. In a notice in February 2025, the Federal Bureau of Investigation (FBI) attributed another $1.5 billion Bybit theft case to North Korea and requested exchanges, infrastructure providers, and blockchain analysis companies to block transactions involving identified addresses.

In a announcement released on June 15th and reported the following day, the payment platform Pyra stated that it would be closing down due to losses related to Drift. The company canceled existing payment cards, stopped accepting new users, and set September 15th as the deadline for withdrawals and exporting private keys.

The closure notice for Pyra stated that the planned web portal would handle account management, withdrawals, as well as the distribution of Drift tokens in the future. At that time, the company indicated that they had not yet received a timeline for token distribution from Drift.