Drift Recovery Claims Open With Initial Payouts Near One Cent on the Dollar
Victims of the $295 million exploit can claim recovery tokens, but the funded pool currently covers only a fraction of losses.
Velocity, the decentralised exchange formerly known as Drift, has opened recovery claims for users affected by its April exploit. The mechanism gives victims one DFX token for every USDT lost, but the amount immediately available for redemption is only a little over one cent per dollar of recognised loss.
DFX holders can redeem and burn their tokens for USDT from the recovery pool, sell the tokens in the secondary market or keep them in the hope that future contributions raise the redemption value. Burning a token ends the holder’s claim on later additions, so victims face a choice between limited liquidity now and uncertain recovery later.
The first-day numbers show the gap. The Block reported that 216,480 DFX had been redeemed for roughly 2,250 USDT while the pool held about 3.11 million USDT. Most of that came from protocol assets. A revenue sweep designed to direct 60% to 90% of net protocol revenue into the pool had added only 31 USDT after the first day.
The April attack removed approximately $295.4 million, according to a September 30 Drift Foundation update. Mandiant attributed the operation to UNC6862, described as a North Korean threat group. Three attacker wallets still held 107,165 ETH worth almost $286 million at the time of the update, while another wallet had moved 23,094 ETH through Tornado Cash in July.
Roughly $9.2 million has been frozen, but returning it requires law-enforcement action. Two much larger promised sources of support were not yet reflected in the pool: up to $127.5 million from Tether and up to $20 million from strategic partners. The words “up to” are important. Until funds arrive and the legal conditions are satisfied, they should not be treated as cash available to victims.
The token structure spreads uncertainty among claimants. If more money enters the pool after some holders redeem, the remaining DFX tokens could claim a larger share. But holding also exposes victims to protocol execution, legal recovery, counterparty and secondary-market risks. Selling transfers those risks to a buyer, likely at a discount that reflects doubts about future funding.
The mechanism also creates a communications challenge. Victims need clear disclosure of the pool balance, outstanding DFX supply, redemption formula, realised protocol revenue and every external contribution. Without a verifiable dashboard and regular reconciliation, the token can become a speculative instrument detached from the assets available for recovery.
Why it matters
The launch converts a headline promise of recovery into a measurable claim, and the first measurement is sobering. A one-cent initial payout demonstrates how far protocol assets and current revenues fall short of the loss. It also shows why announced partner commitments cannot substitute for funded reserves.
For DeFi users, the case highlights the hierarchy of protection after an exploit. Code-level claims do not automatically create legal priority, and frozen assets do not automatically return to victims. Recovery depends on investigations, court orders, counterparties and the continued operation of a protocol that has already suffered a severe breach.
The decisive questions are now operational: when Tether or strategic partners transfer money, how frozen assets are released, whether protocol revenue grows and how many holders redeem early. Until those answers are visible on-chain or in binding agreements, DFX is best understood as a contingent recovery claim rather than reimbursement.