A month after North Korean-affiliated hackers drained $295 million in user funds from decentralized crypto exchange Drift Protocol, the Solana-based platform has released a detailed recovery plan outlining how it intends to compensate affected users and relaunch as a rebuilt, security-focused exchange.

The April 1 attack was attributed to a North Korea state-affiliated threat actor, as confirmed by forensic firm Mandiant. Following the exploit, Drift temporarily suspended all core protocol functions—including trading and borrowing—to prevent further unauthorized activity.

Approximately 130,259 ETH, worth roughly $293 million today, remains concentrated across four Ethereum wallets that are actively monitored and have…