Drift Foundation reported recovering $9.2 million from a $295.4 million security breach on April 1, with 107,165 ETH still held in dormant wallets. Mandiant identified North Korean group UNC6862 as responsible, and the foundation launched a 10% bounty program with Bybit to recover additional stolen assets.