2024

when

Tornado Cash

Tornado

<p>The <a href="https://www.cryptopolitan.com/hackerleak-millions-from-yield-protocol/" rel="noopener noreferrer nofollow">hacker</a>, who made his $25 million exploit with the Kronos research firm earlier in the year, started moving funds right from the day of the exploit, which is almost six months now.</p>
<h2 class="wp-block-heading" id="crypto-laundering-tactics">Crypto laundering tactics</h2>
<p>The hacker who bought the 1,314 Ether coins initiated the transaction with a hacker wallet. The hacker met the wallet with this address,0x8F5e4, and transferred 4 million dollars worth of ETH. Later, the ETH was transferred to a new address, <a href="https://etherscan.io/address/0x164a24bf02c8573942b8f066e7e25341b02fd5c4" rel="noopener noreferrer nofollow" target="_blank">0x164A24b</a>.</p>
<figure class="wp-block-image"><img decoding="async" src="https://lh7-us.googleusercontent.com/CUOHz19LcaDCvJvYn8lSfl5xgdMoPmJgzlUmgTygTw6Qn6j64yu0bEpEvS3UJiId-yI4gzTpVsLDHfJm0O7J9MP4PJGhs_-dXop0rFJt3xME3B-X4QdNolx1Fp9J3_6IMxwU7MUgHzZmfSugXi4WNa8" alt="">
</figure>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<em>Source: PeckShield</em></p>
<p>The cybercriminal, in turn, finished with ten transfers from the last pool to the crypto-mixing service Tornado Cash. Tornado Cash is an open-source cryptocurrency mixer that operates on networks compatible with the Ethereum Virtual Machine. The mixer services, in turn, confuse the travel and make it impossible to trace the origin of the funds.&nbsp;</p>
<figure class="wp-block-image"><img decoding="async" src="https://lh7-us.googleusercontent.com/CrI71dJ-ddlLXGBn7C_9xe89Jl-7mMaU7B0euorYfpS68Ao34dK-S6_F22n4kicjJ1pbVcicMkwUSbmnHh-iKQ_LO0Ejhi0kGgQcMJqfF_S-zGTkWvidRBccqeqIumouMX2P8p3FZvS-NGaYfE4NtGM" alt="">
</figure>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<em>Source: Etherscan</em></p>
<p>Although these mixing services were created merely to hide the sender’s identity or privately move wealthy individuals’ assets, hackers frequently exploit these platforms to launder stolen funds and capitalize on them through decentralized exchange platforms.</p>
<p>The recent case of stealing funds from Tornado Cash, mainly used for money laundering, led to the U.S. government imposing sanctions on its usage in August 2022. In addition, the founders were found guilty 2023 of money laundering and sanctions violations.&nbsp;</p>
<p>Cryptocommunity members also differ in their opinions on embracing these privacy-enhancing methods. Yet, they unanimously support the case against the persecution of developers who have created applications or technologies to perform these functions.</p>
<h2 class="wp-block-heading" id="privacy-tools-misused">Privacy tools misused</h2>
<p>The crypto-analyzing company PeckShield issued a warning regarding funds transferred on X. It warned that the incoming transfer to Tornado Cash manifests that the hacker is trying to conceal the translated sums.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#PeckShieldAlert</a> <a href="https://twitter.com/hashtag/KronosResearch?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#KronosResearch</a> Hacker 5: The labeled address has transferred 200 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">$ETH</a> to <a href="https://twitter.com/hashtag/Tornadocash?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#Tornadocash</a> and approximately 1,314 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">$ETH</a> (worth around $4 million) to a new address 0x164A…D5c4, and started laundering them via <a href="https://twitter.com/hashtag/Tornadocash?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#Tornadocash</a><a href="https://twitter.com/hashtag/KronosResearch?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#KronosResearch</a> was hacked in mid-November… <a href="https://t.co/7YOVuNpebd" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/7YOVuNpebd</a></p>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1787726644767252886?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">May 7, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>Overall, exploiters prefer crypto-mixers over centralized exchanges since once they are identified, these exchanges block the wallets accordingly.</p>
<p>The Kronos Capital platform was exploited in November 2023, when the hackers got access to keys to the platform’s application programming interface, exploiting the key exposure vulnerability. The company initially refused damage done to the funds at the beginning of its existence.</p>
<p>Shortly afterward, investigator ZachXBT, operating on the chain, determined that at least 12,800 ETH from the total of those stolen and with the cost of almost $25 million were sent to six different <a href="https://www.cryptopolitan.com/crypto-hackers-strike-at-yiedl-platform/" rel="noopener noreferrer nofollow">crypto</a> addresses. Kronos Capital shut down its trading services to conduct a thorough investigation.</p>

Hacker launders millions in stolen crypto through an anonymity service

Table of Contents

Cryptopolitan_News

Other articles published on May 8, 2024

Major Crypto Whales Are Stacking These Altcoins

zkSync Hyperchain Sophon Successfully Raises $60 Million Via Node Sale

Bitcoin (BTC) Confronts Essential Support Level: Market Momentum Decides Future

Vitalik Buterin Proposes an Alternative to EIP 3074 For Reducing Developers’ Risks

Sports Stars Settle in Voyager Digital Lawsuit for $2.42 Million

Experts predict strong performance for 99Bitcoins presale

Join our free newsletter for daily crypto updates!