Ethereum

Tornado Cash

Tornado

WazirX

Cloud

The WazirX exploiter continues to move thousands of the stolen assets across new wallets, with part of the latest batch laundered through crypto mixer Tornado Cash.&nbsp;
Blockchain security platform Cyvers recently indexed the transfer of exactly 5,001 Ethereum (<a href="https://crypto.news/price/ethereum/" target="_blank" rel="noopener noreferrer nofollow">ETH</a>) from the exploiter’s address to a new wallet.&nbsp;
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 🚨UPDATE🚨 <a href="https://twitter.com/WazirXIndia?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@WazirXIndia</a> hacker just transferred 5K <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">$ETH</a> (~$11.6M) to a new address: <a rel="noopener noreferrer nofollow" href="https://t.co/JyJoJDdkcK" target="_blank">https://t.co/JyJoJDdkcK</a> and already deposited $1.4M to <a href="https://twitter.com/TornadoCash?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">@TornadoCash</a> Want to keep your company off our alerts radar? Learn how to secure your assets: Book a Demo 🚀 <a rel="noopener noreferrer nofollow" href="https://t.co/uUbFkFTp4h" target="_blank">https://t.co/uUbFkFTp4h</a>… <a rel="noopener noreferrer nofollow" href="https://t.co/QS8iffPwOj" target="_blank">https://t.co/QS8iffPwOj</a> <a rel="noopener noreferrer nofollow" href="https://t.co/qCBcDqFerk" target="_blank">pic.twitter.com/qCBcDqFerk</a>— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) <a href="https://twitter.com/CyversAlerts/status/1836304820321325503?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">September 18, 2024</a>
 </blockquote>
 <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
On-chain data confirms that this transaction occurred today at 06:53 UTC, resulting in the creation of the recipient address, <a href="https://etherscan.io/address/0x5990c7e24816bd103982b02e82ebf3adb49b6a6a" target="_blank" rel="noopener noreferrer nofollow">0x5…a6a</a>.
Shortly after receiving the 5,000 ETH tokens, the new wallet began laundering them through Tornado Cash in multiple batches of 100 ETH, worth roughly $232,000, each. So far, the address has moved 36 batches, amounting to 3,600 ETH, to the crypto mixer.&nbsp;
As of press time, the laundering scheme is ongoing, with the total amount likely to increase in the coming hours, as data from previous transactions suggest.
You might also like: <a rel="noopener noreferrer nofollow" href="https://crypto.news/google-cloud-unveils-new-blockchain-rpc-service-with-ethereum-compatibility/"> Google Cloud unveils new blockchain RPC service with Ethereum compatibility </a>
This pattern is consistent with the WazirX exploiter’s behavior. After accumulating over 43,800 ETH through multiple transactions following the hack, the primary wallet held the tokens until six days ago, routing funds through new addresses to Tornado Cash.
To date, the exploiter has transferred 20,004 ETH to four different addresses, each receiving 5,001 ETH since Sept. 12. These new wallets typically transfer the entire amount to Tornado Cash in 100 ETH batches, suggesting the most recent address still has 2,601 ETH left to launder.&nbsp;
Meanwhile, another primary wallet tied to the exploiter has also carried out similar transactions, with one of its 5,000 ETH transfers identified in a <a href="https://crypto.news/wazirx-hacker-transfers-1600-eth-to-tornado-cash/" target="_blank" rel="noopener noreferrer nofollow">report</a> on Sept. 5.
Recall that the WazirX hack, which <a href="https://crypto.news/indian-exchange-wazirx-loses-234m-in-recent-exploit/" target="_blank" rel="noopener noreferrer nofollow">occurred</a> in July, saw the leading Indian exchange lose over $230 million in several crypto assets, siphoned from its multi-sig wallet. Shortly after, the hacker began <a href="https://crypto.news/wazirx-hack-sees-200m-in-crypto-swapped-for-eth-to-thwart-blocking/" target="_blank" rel="noopener noreferrer nofollow">converting</a> the assets for Ethereum.
The exchange blamed the hack on a vulnerability from its custody provider Liminal Custody. However, the crypto custodian denied these speculations. Interestingly, an audit from Grant Thornton recently <a href="https://crypto.news/audit-finds-230m-wazirx-hack-originated-outside-liminal-custody/" target="_blank" rel="noopener noreferrer nofollow">found</a> that the exploit occurred outside Liminal.
Amid the ongoing laundering scheme, an X account dedicated to seeking justice for affected WazirX users asserted that the hack could have also <a href="https://crypto.news/wazirx-hacker-launders-over-64m-insider-involvement-suspected/" target="_blank" rel="noopener noreferrer nofollow">involved an insider</a>, citing on-chain data and reports filed with the police in Delhi.
Read more: <a rel="noopener noreferrer nofollow" href="https://crypto.news/cryptoquant-ceo-were-in-the-middle-of-the-bull-cycle/"> CryptoQuant CEO: We’re in the middle of the bull cycle </a>

WazirX exploiter moves $11.6m in ETH to Tornado Cash

crypto.news

Other articles published on Sep 18, 2024

Succinct Labs and OP Labs Team Up to Launch New Zero-Knowledge Proof Solution

Bybit Card Now Fully Open for Users in Brazil (18 Sep)

Bitget and Foresight Ventures invest $30M in TON blockchain

Cardano Ecosystem Expands With NIGHT Token Launch, ADA Price To Rally?

BlackRock Highlights Bitcoin’s Unique Investment Role

Rate Cut Could Boost BTC up for a Three-month Rally Above $92,000, Analysts Claim – Here Are the ...

Join our free newsletter for daily crypto updates!