Users who lost money in Drift’s $295.4 million April exploit can finally begin recovering funds, but the first decision facing them is uncomfortable: take roughly one cent for every dollar lost now, or keep a recovery token whose eventual value depends on future revenue, promised partner support and the return of stolen assets.
Velocity, the rebuilt exchange formerly known as Drift, opened claims for DFX recovery tokens on October 1. Eligible wallets receive one DFX for every USDT of verified losses recorded after the April 1 attack.
DFX is not equivalent to one USDT today. Instead, each token represents a proportional claim on a Recovery Pool. According to Drift’s official recovery terms, the token has a fixed supply of 299,500,810.998 DFX and no additional tokens can be minted.
Holders can redeem DFX for USDT, trade it on secondary markets such as Raydium, or simply hold it while waiting for more money to enter the recovery pool.
The launch redemption rate is only about 0.0104 USDT per DFX. A user with a verified 10,000 USDT loss could therefore cash out for only about 104 USDT at the current rate.
Redeeming DFX Means Giving Up the Future Claim
The most important feature of the recovery structure is that a redemption is final.
When a holder redeems DFX, the recovery token is burned in the same transaction that pays out USDT. The holder therefore receives today’s recovery value but permanently gives up the token’s exposure to any future money added to the pool.
That creates a very different decision from a normal reimbursement program.
Users are effectively choosing between immediate liquidity and an uncertain long-term recovery claim. Holding DFX preserves exposure to future protocol revenue, partner funding and recovered stolen assets. Redeeming converts that uncertain future claim into cash today.
The pool started at approximately 3.11 million USDT. By Friday, the recovery dashboard showed roughly 216,480 DFX had already been redeemed for about 2,250 USDT.
Early redemptions do not reduce the redemption rate for everyone else because USDT and DFX leave the system proportionally. What does change is the distribution of future deposits: because redeemed DFX is destroyed, later funding is divided among fewer remaining tokens.
Drift gives a simple example. If 10% of DFX supply is redeemed and burned, each remaining token receives roughly 11% more exposure to subsequent recovery-pool deposits.
Velocity Revenue Is Supposed to Turn Trading Activity Into Recovery
The recovery plan effectively ties victims’ reimbursement to the performance of the relaunched exchange.
Velocity’s trading fees are divided between its Insurance Fund, vAMM capital and Net Protocol Revenue. A portion of that net revenue is then transferred into the DFX pool each day at 00:00 UTC.
The contribution rate is progressive. The recovery pool receives 60% of the first 30,000 USDT of daily Net Protocol Revenue, 70% of revenue between 30,000 and 100,000 USDT, and 90% above 100,000 USDT.
That sounds powerful at scale, but the first numbers demonstrate how dependent the model is on Velocity rebuilding substantial trading activity. The dashboard’s initial revenue contribution was only around 31 USDT.
There is nothing surprising about a small first-day contribution, particularly for a newly relaunched venue. But it highlights the basic math. A roughly $299.5 million recovery-token liability cannot be repaired quickly through modest daily trading fees.
Tether’s $127.5 Million Could Change the Math, but It Is Not in the Pool Yet
The much larger potential source of recovery capital is Tether.
The stablecoin company committed up to $127.5 million as part of the broader Drift recovery and relaunch agreement, while strategic partners committed up to another $20 million.
Those headline commitments should not be confused with cash already available for DFX redemptions. The structure includes staged and performance-linked support, and the full pledged amounts were not sitting in the 3.11 million USDT recovery pool when claims opened.
This distinction is crucial for DFX holders. At today’s redemption rate, the token represents approximately one cent of immediately accessible recovery value. Its much larger potential value depends on capital that may arrive later.
That effectively turns DFX into a market-priced claim on the success of the recovery process.
Someone buying DFX on a secondary market is not simply buying exposure to Velocity. They are making a judgment about future trading revenue, the Tether support structure, partner funding, asset recoveries and how much DFX will eventually be burned by other holders.
$9.2 Million Is Frozen but Still Cannot Be Paid to Users
Stolen assets provide another possible source of future DFX funding.
The Drift Foundation said in its September 30 recovery update that approximately $295.4 million in user assets was taken in the April 1 attack. Mandiant identified the attacker as UNC6862, which the foundation described as a North Korean threat group.
Investigators say about 130,259 ETH connected to the stolen assets ultimately reached four Ethereum wallets. Three of those wallets still held approximately 107,165 ETH without outgoing transfers at the time of the update, while a fourth wallet moved about 23,094 ETH through Tornado Cash on July 23.
Approximately $9.2 million in stolen funds has also been frozen.
But frozen does not mean recovered.
The assets cannot simply be transferred into the DFX pool because releasing them requires cooperation with law enforcement and the relevant legal process. That distinction has repeatedly complicated crypto recovery efforts. Dave Finances recently examined how asset freezes can narrow a hacker’s options without immediately returning money to victims.
Drift says assets ultimately recovered through freezes, law-enforcement action or its bounty program will be directed into the recovery pool.
The 107,165 ETH Is Now the Biggest Recovery Wild Card
The three wallets holding 107,165 ETH are arguably more important to DFX economics than Velocity’s first weeks of trading revenue.
Those funds remain enormously valuable, but visibility on-chain is not the same thing as recoverability.
If the attacker sends ETH into mixers, cross-chain protocols or services that cannot freeze assets, the recovery path becomes harder. If funds eventually touch a centralized exchange or another intermediary with identifiable accounts and the ability to restrict withdrawals, investigators may get another opportunity.
That cat-and-mouse dynamic has been visible in other recent hacks. During the Bitget laundering operation, for example, a transaction routed through Chainflip was rejected by a broker, showing how individual infrastructure providers can become unexpected choke points.
The industry is also increasingly splitting over how aggressively decentralized protocols should screen potentially stolen assets. The contrasting responses of THORChain and NEAR Intents following the Bitget hack showed how compliance controls can materially affect laundering routes.
DFX Turns Recovery Into a Tradeable Bet
The unusual part of Drift’s solution is that victims do not have to wait passively for a bankruptcy-style distribution.
They can exit today, keep the recovery claim, or sell that claim to somebody else.
That flexibility is useful, but it also transfers the uncertainty into a market price.
A distressed user who needs liquidity may accept roughly 1% through the redemption mechanism or whatever price buyers offer on the secondary market. A more patient holder may decide that Tether funding, protocol revenue and stolen-asset recovery make holding DFX worthwhile.
A speculator can take the other side without ever having been a Drift victim.
In effect, the protocol has converted hundreds of millions of dollars of unresolved losses into a transferable instrument whose value reflects expectations about future recovery.
That is innovative, but it is not the same thing as making users whole.
The Recovery Pool Is the Number That Matters Now
The launch headline says affected users receive one DFX for every USDT lost. The more meaningful number is the amount of USDT actually backing each DFX.
At launch, that was roughly 0.0104 USDT.
From here, investors and victims should watch four things: how quickly Velocity generates revenue, when and under what conditions Tether’s support enters the pool, whether the $9.2 million already frozen clears the legal process, and what happens to the 107,165 ETH that remains in attacker-controlled wallets.
The burn mechanism adds one final variable. Every victim who accepts the small immediate payout permanently reduces the number of tokens competing for whatever recovery money arrives later.
That means DFX holders are no longer waiting only for Drift to recover from a hack. They are also implicitly betting on how many other victims decide they cannot afford to wait.
Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.
His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.
Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape.