Tornado Cash

Tornado

Over half of the $100 million worth of Ether&nbsp;<a href="https://cointelegraph.com/news/poloniex-exchange-hack-60-million-drained-5-percent-bounty">linked to the infamous Poloniex hack</a> from November 2023 has been siphoned via the privacy protocol Tornado Cash.
On Nov. 10, 2023, wallets belonging to crypto exchange Poloniex recorded massive unauthorized outflows. Investigations later confirmed that over $100 million worth of Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>)&nbsp;was lost to a hack.
Despite Poloniex <a href="https://cointelegraph.com/news/poloniex-hacker-identity-confirmed-10-million-bounty">claiming to have identified the hacker</a> weeks later and offering a $10 million bounty, the stolen funds never made it back to the exchange. According to the blockchain security firm CertiK, the incident was likely a “private key compromise.”
In response to the suspicious outflows, the exchange had temporarily disabled the compromised wallet.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/433c8bf3-0f9f-45ef-ab91-8f6370148853.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 On-chain message from Poloniex to the hacker. Source: PeckShield
 </figcaption>
</figure>
Six months later, it became evident that the Poloniex hacker had no intention of returning the stolen funds. Blockchain investigation firm PeckShield found that more than half of the loot was siphoned across Tornado Cash, a protocol used to anonymize assets.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/4236e509-dba4-4180-b983-b6cf3a07db04.jpeg" alt="" title="">
 <figcaption style="text-align: center;">
 Poloniex hacker transferring stolen funds to Tornado Cash wallet. Source: PeckShield
 </figcaption>
</figure>
The hacker moved over 17,800 ETH from six different wallets into a single Tornado Cash address, as shown in the flowchart above. At the time of transfer, the tokens were worth approximately $53.3 million. 
Related: <a href="https://cointelegraph.com/news/pike-finance-exploited-1-6-million-second-exploit-3-days">Pike Finance exploited for $1.6M in second incident in 3 days</a>
Poloniex resumed operations shortly despite the $100 million setback, enabling investors to deposit and withdraw crypto at will.
The exchange appointed a “top-tier security auditing firm” to enhance the security of funds on Poloniex and avoid such hacks in the future. At the time. The company had said:
<blockquote data-ct-non-breakable="true">
 “Currently, they are in the final stages of the security audit and verification processes for Poloniex. Upon completion of the audit, we will promptly resume deposit and withdrawal services on our platform.”
</blockquote>
Poloniex owner Justin Sun — who <a href="https://cointelegraph.com/news/tron-founder-justin-sun-admits-investment-in-crypto-exchange-poloniex">acquired the exchange in 2019</a> — had promised to fully reimburse the users affected by the breach, claiming that Poloniex “maintains a healthy financial position” and is looking for collaborations with other exchanges to recover the lost funds.
Magazine: <a href="https://cointelegraph.com/magazine/crypto-market-makers-legit-dodgy-fake-it/">What do crypto market makers actually do? Liquidity, or manipulation</a>

Stolen Poloniex Ether worth $53M never made it back to the exchange

Cointelegraph

Other articles published on May 14, 2024

Nigeria to establish startup house in San Francisco- Minister Tijani

New Meme Token Flow Stimulated the Markets! These Altcoins Are on the Rise Under the Leadership o...

Shiba Inu (SHIB) Two-Month-Old Downtrend Invalidation Likely

Top 5 Real World Asset (RWA) Cryptocurrencies: What’s Driving Their Meteoric Rise?

Deutsche Bank joins Singapore's asset tokenization project

Coinbase Resumes Operations Following Four Hours System Outage

Join our free newsletter for daily crypto updates!