Rocket

Tornado Cash

Rocket Pool

Tornado

A crypto whale fell victim to a phishing scam, losing $24 million in Rocket Pool Ether (rETH) and Lido staked Ether (stETH) on Sept. 7. 
A wallet tied to at least $24 million in stolen cryptocurrencies deposited 600 Ether (<a href="https://crypto.news/price/ethereum/" rel="noopener noreferrer nofollow">ETH</a>) worth an estimated $936,000 into <a href="https://crypto.news/tag/tornado-cash/" rel="noopener noreferrer nofollow">Tornado Cash</a>, an Ethereum-based privacy tool sanctioned by the US Treasury Department. 
The address received 2000 ETH tokens from a wallet labeled “FakePhishing186943” on block explorer Etherscan. FakePhishing186943 seems to be the recipient of proceeds from multiple phishing campaigns.&nbsp; 
On Sep. 7, a crypto whale <a href="https://crypto.news/crypto-whale-losses-over-24m-in-phishing-scam/" rel="noopener noreferrer nofollow">fell victim</a> to one of these malicious attacks masterminded by phishers. The whale, crypto’s term for addresses with large amounts of digital assets, lost $24 million in liquid staking derivatives after clicking a fake link, according to on-chain analytics provider <a href="https://twitter.com/CertiKAlert/status/1701153758732812506?s=20" data-type="link" data-id="https://twitter.com/CertiKAlert/status/1701153758732812506?s=20" target="_blank" rel="noopener noreferrer nofollow">CertiK</a>. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 <a href="https://twitter.com/hashtag/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#CertiKSkynetAlert</a>🚨 We have seen a movement of funds into <a href="https://twitter.com/TornadoCash?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@TornadoCash</a> from eoa 0x71C8 who has deposited 600 ETH (~$970K) out of 2000 ETH received from "FakePhishing186943". The phisher stole $24M worth of assets from a crypto whale on Sept 6th.<a href="https://t.co/ZuYu2x9Zse" target="_blank" rel="noopener noreferrer nofollow">https://t.co/ZuYu2x9Zse</a>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1701153758732812506?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">September 11, 2023</a> 
 </blockquote> 
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div> 
</figure> 
As a result, the scammer gained transaction authorization and stole 9,579 Lido staked Ether (stETH) worth $15.6 million at the time.&nbsp; 
The culprit also drained 4,851 in Rocket Pool Ether (rETH) valued at $8.5 million from the whale’s coffers. According to Etherscan, the theft happened in two transactions, and “FakePhishing186943” received the looted assets. 
 You might also like: <a href="https://crypto.news/crypto-whale-losses-over-24m-in-phishing-scam/" rel="noopener noreferrer nofollow"> Crypto whale losses over $24m in phishing scam </a> 
The deposit into Tornado Cash, a protocol that allows users to obscure their transactions, is likely an attempt to throw off would-be crypto trackers and law enforcement by tapping a decentralized privacy tool. 
This potentially makes it harder to track where assets came from. The tool’s privacy features reportedly stirred concerns with the US Treasury Department, and sanctions on Tornado Cash <a href="https://crypto.news/u-s-treasury-bans-tornado-cash-citing-links-to-lazarus-hacking-group/" rel="noopener noreferrer nofollow">were eventually placed </a>in August 2022. 
Indeed, the Treasury’s Office of Foreign Assets Control (OFAC) <a href="https://crypto.news/tornado-cash-creators-deny-laundering-1b-for-north-korea-hackers/" rel="noopener noreferrer nofollow">claimed</a> North Korean hackers and other bad actors leveraged Tornado Cash for billions in money laundering.&nbsp; 
A trio of developers and co-founders <a href="https://crypto.news/tornado-cashs-developer-allegedly-worked-for-a-company-linked-to-the-fsb/" rel="noopener noreferrer nofollow">were also accused</a> of conspiracy and evasion of sanctions due to their contribution to Tornado Cash. 
Roman Storm, one of the three devs, <a href="https://crypto.news/tornado-cash-creators-deny-laundering-1b-for-north-korea-hackers/" data-type="link" data-id="https://crypto.news/tornado-cash-creators-deny-laundering-1b-for-north-korea-hackers/" rel="noopener noreferrer nofollow">pleaded</a> not guilty to criminal charges on Sep. 6. The court confiscated his Russian passport and issued a $2 million bail. 
Another fellow developer, Alexey Pertsev, accused of money laundering, spent nine months in Dutch detention before his release in April 2023. 
 Read more: <a href="https://crypto.news/tornado-cash-developer-alex-pertsev-to-be-released-from-jail/" rel="noopener noreferrer nofollow"> Tornado Cash developer Alex Pertsev to be released from jail </a>

600 Ether from phishing exploit deposited into Tornado Cash

crypto.news

Other articles published on Sep 11, 2023

Investor who lost 8k Bitcoins in dump sues local council

Cryptocurrency Marauder Exposes 21,877 zkSync Sybil Attack

BPOLL is on your way!

Solana Drops 6% Amid Fears of FTX Sell-off – With a Twist

Anchorage Digital CEO Highlights 'Widespread' Self-Custody Risks After Prime Trust Bankruptcy

Crypto Market Selloff: Here's Why Crypto Prices Falling Sharply

Join our free newsletter for daily crypto updates!