Hacker Transfers $6.5 Million in Ethereum (ETH) to Tornado Cash Mixer: Report

An Indian crypto exchange, WazirX, recently faced a hack that led to the movement of millions of dollars in Ethereum from a compromised address, as revealed by cybersecurity firm PeckShield. The hacker behind the breach shifted the Ethereum funds to Tornado Cash, a service that enables anonymous digital asset transactions.

The exploit involved the transfer of 2600.1 ETH, valued at approximately $6.5 million, to Tornado Cash from the address associated with the WazirX hack. The stolen Ethereum was part of the larger breach on July 18th, where over $230 million in various digital assets were stolen.

According to blockchain monitoring entity Lookonchain, WazirX lost not only Ethereum but also other digital assets such as Tether (USDT), Polygon (MATIC), Gala, Shiba Inu (SHIB), and Pepe during the cyberattack. The hacker was observed selling the pilfered SHIB and PEPE tokens, indicating a process of liquidating the stolen assets.

In response to the security incident, WazirX announced a rollback of all trades and the restoration of customer balances affected by the hack. Users were assured that their portfolio balances on the platform would be reverted to the state they were in on July 18, 2024, at 1 PM IST, with notifications sent to impacted users regarding any trade adjustments.

Crypto investigator ZachXBT suggested a potential link between the hack and The Lazarus Group, a notorious North Korean cyber hacking organization known for its involvement in cryptocurrency-related breaches.

The breach at WazirX underscores the ongoing challenges faced by crypto exchanges in safeguarding user assets from malicious actors. The incident serves as a reminder of the importance of robust security measures and constant vigilance in the ever-evolving landscape of digital asset protection.