600 Ether from phishing exploit deposited into Tornado Cash

As a result, the scammer gained transaction authorization and stole 9,579 Lido staked Ether (stETH) worth $15.6 million at the time. 

The culprit also drained 4,851 in Rocket Pool Ether (rETH) valued at $8.5 million from the whale’s coffers. According to Etherscan, the theft happened in two transactions, and “FakePhishing186943” received the looted assets.

The deposit into Tornado Cash, a protocol that allows users to obscure their transactions, is likely an attempt to throw off would-be crypto trackers and law enforcement by tapping a decentralized privacy tool.

This potentially makes it harder to track where assets came from. The tool’s privacy features reportedly stirred concerns with the US Treasury Department, and sanctions on Tornado Cash were eventually placed in August 2022.

Indeed, the Treasury’s Office of Foreign Assets Control (OFAC) claimed North Korean hackers and other bad actors leveraged Tornado Cash for billions in money laundering. 

A trio of developers and co-founders were also accused of conspiracy and evasion of sanctions due to their contribution to Tornado Cash.

Roman Storm, one of the three devs, pleaded not guilty to criminal charges on Sep. 6. The court confiscated his Russian passport and issued a $2 million bail.

Another fellow developer, Alexey Pertsev, accused of money laundering, spent nine months in Dutch detention before his release in April 2023.

Follow Us on Google News