Drift Foundation opened redemption claims on October 1, 2026 for DFX, a recovery token pegged to the $295.4 million lost in the April 1 breach of the Solana protocol. Victims can exchange one DFX for each USDT of verified loss, with the window closing on January 1, 2028 and any unclaimed tokens burned.

The foundation launched the DFX claims page six months after a North Korean-affiliated group drained an estimated $295.4 million through social engineering and a multi-signature compromise that included a nonce attack. DFX operates as a transferable SPL token on Solana, fully separate from DRIFT, the protocol's existing governance asset.

What does the DFX token actually represent?

Each DFX corresponds to $1 of loss measured at oracle prices fixed at the time of the April 1 incident, rather than current market values. Holding DFX grants a claim on a dedicated recovery pool, and because the token is transferable, holders are not required to wait for redistribution by the foundation.

Where is the recovery money coming from?

The recovery pool opened with approximately $3.8 million in protocol assets, a small fraction of the $295.4 million hole. The foundation is assembling the remainder from five sources:

• Tether: anticipated support of up to $127.5 million from the stablecoin issuer
• Partners: $20 million from other backers
• Frozen assets: $9.2 million redirected from accounts frozen as of late September 2026
• Exchange revenue: ongoing revenue captured after the protocol's relaunch
• Bounty program: a 10% recovery bounty run in partnership with Bybit, with returned funds flowing into the DFX pool

The Tether figure carries a structural caveat. The foundation describes the contribution as anticipated support capped at $127.5 million, not a disbursed payment.

How was the April 1 exploit carried out?

Investigators have attributed the attack to a North Korean-affiliated group that combined targeted social engineering against protocol personnel with manipulation of the multi-signature signer set, including a nonce-based replay. Drift halted operations immediately after the theft and began recovery work alongside forensic firms and law enforcement. Prior Insurance Fund claims were not affected by the breach and remain available to depositors.

What changes for users?

The January 1, 2028 deadline converts the recovery into a use-it-or-lose-it entitlement. Users who fail to claim DFX before that date forfeit the underlying loss entirely, since unclaimed tokens are burned.

Separating DFX from DRIFT isolates victim claims from governance voting and the speculative trading that typically surrounds governance tokens. The structure also gives the foundation a continuing incentive to rebuild exchange activity, since post-relaunch revenue feeds directly into the pool.

What should creditors watch next?

Three operational checkpoints will determine how much of the $295.4 million loss is ultimately covered:

1. Whether Tether's anticipated $127.5 million materializes in full
2. Whether additional frozen or recovered assets reach the pool
3. Whether post-relaunch exchange revenue accumulates into a meaningful contribution

Until those variables resolve, the DFX pool remains a partial IOU: claims are live, balances are open, and the January 1, 2028 burn rule sets a hard terminus on Drift's compensation timetable.