Drift Velocity exploit recovery pays victims just 1 cent on the dollar

Months after one of 2026’s largest decentralized finance hacks, the platform behind it is finally letting victims file for compensation — but the math isn’t pretty yet. The Drift Velocity exploit recovery process opened on October 1, 2026, giving users a way to claim tokens tied to the roughly $295.4 million stolen from the exchange on April 1. For now, though, those claims are worth barely a penny on the dollar.

Key takeaways

• Velocity, the rebranded version of Drift, opened recovery claims on October 1, letting users claim one DFX token for every USDT they lost in the April exploit.
• Each DFX currently redeems for just over 0.01 USDT, roughly 1% of what was lost; 216,480 DFX have already been redeemed for about 2,250 USDT.
• The recovery pool holds 3.11 million USDT from protocol assets, while up to $147.5 million pledged by Tether and strategic partners has not yet arrived.
• Roughly $295.4 million was stolen in total, with hacker wallets still holding 107,165 ETH (about $286 million) and $9.2 million frozen pending law enforcement release.

Velocity Launches Recovery Claims With DFX Tokens

Velocity, the decentralized exchange formerly known as Drift, began accepting recovery claims on October 1 for users who lost funds in the April exploit. The platform confirmed that affected users can claim one DFX token for every USDT lost, formally kicking off a DFX token redemption process that had been anticipated since the hack.

Claim Process and Options for Users

Once a user claims their DFX allocation, three paths open up. They can redeem and burn the tokens immediately for USDT pulled from Drift’s recovery pool, sell the tokens on the secondary market, or simply hold onto them in hopes of a better payout down the line. That last option carries a theoretical upside: as more DFX gets burned by other holders, future pool deposits get divided among a shrinking token supply, which could push up the redemption value over time. It’s a bet on patience rather than a guarantee.

Current Redemption Rate and Token Metrics

Right now, the numbers are modest. Each DFX token redeems for a little over 0.01 USDT — essentially getting back one cent for every dollar lost. As of Friday, Velocity’s redemption dashboard showed 216,480 DFX tokens already redeemed for roughly 2,250 USDT in total payouts. That’s a tiny fraction of the hundreds of millions originally stolen, underscoring just how early this recovery effort still is.

Status of the Recovery Pool and Funding Commitments

The pool backing these redemptions currently totals just 3.11 million USDT, almost entirely from protocol assets rather than outside contributions. That gap between pledged support and actual funds on hand is the central tension in this recovery story: large commitments exist on paper, but they haven’t yet translated into dollars users can claim.

Recovery Pool Composition and Revenue Contributions

Going forward, between 60% and 90% of Velocity’s net protocol revenue will also be swept into the recovery pool, as the platform has pledged. So far, that mechanism has added just 31 USDT after its first day — a figure that illustrates how slow organic revenue contributions will be compared to the scale of losses involved.

Pending Contributions From Tether and Strategic Partners

The bigger money hasn’t shown up yet. Tether previously committed up to $127.5 million to support Drift’s relaunch and user recovery, and strategic partners separately pledged up to $20 million more. Neither sum has been reflected in the recovery dashboard so far, meaning the current 1% redemption rate doesn’t yet account for what could eventually be a much larger pool — assuming those commitments are fulfilled.

This is where the story matters most for users and for the broader DeFi industry watching how hack victims get made whole. A pledge is not a payout, and until Tether’s and the partners’ funds actually land in the pool, DFX holders are redeeming against a relatively thin reserve. How quickly that gap closes will likely shape whether users choose to cash out now or gamble on holding.

What Happened in the April 1 Exploit

The Drift Foundation detailed the scale of the attack in a September 30 update, confirming that approximately $295.4 million was stolen on April 1. Cybersecurity firm Mandiant attributed the breach to a hacker group tracked as UNC6862, which it identified as a North Korean threat group.

Where the Stolen Funds Stand Now

The stolen assets were bridged over to Ethereum, and three attacker wallets still hold 107,165 ETH — worth close to $286 million at current prices. A fourth wallet linked to the attackers previously moved 23,094 ETH through the Tornado Cash mixer back in July, a move typically associated with attempts to obscure the trail of stolen funds.

Frozen Assets and the Law Enforcement Bottleneck

Not all of the stolen money is beyond reach. About $9.2 million has been frozen so far, according to the Drift Foundation. But that money can’t simply be added to the DFX recovery pool — it first needs to be cleared by law enforcement. That dependency means the pace of recovery isn’t purely in Velocity’s hands; it also rests on investigators and whatever legal process is required to release frozen assets back to victims.

Taken together, the numbers paint a recovery effort still in its earliest stage. Redemptions are live, the mechanics are transparent, and the pledges on the table are substantial relative to the losses — but the actual money moving through the system remains a small fraction of what was taken. For the thousands of users holding DFX, the real decision is whether to take the one-cent-on-the-dollar payout now or wait on commitments that, as of this week, still haven’t materialized.

Article produced with the assistance of artificial intelligence and reviewed by the editorial team.