Analysis: The money laundering path of the stolen funds from Drift involves Backpack accounts, and KYC information may be a key clue

According to on-chain analyst aryan's disclosure on the X platform, in the attack incident on the Drift protocol treasury, the attacker's address obtained funds through NEAR Intents 8 days ago but remained inactive until receiving a large amount of assets from the Drift treasury.

The attacker transferred the funds to multiple money laundering addresses. Notably, these money laundering addresses received funds through Backpack yesterday, and Backpack should have conducted KYC verification on these accounts. Subsequently, the money laundering addresses transferred the funds to an Ethereum address via Wormhole, which had previously received funds through Tornado Cash.