Follow-up on the stolen $282 million wallet: $63 million has been transferred to a mixing pool

robot
Abstract generation in progress

On January 19, 2026, on-chain security company CertiK released the latest update regarding the major wallet theft incident that occurred on January 10. According to blockchain data tracking, some of the stolen funds related to the attack involving over $282 million have appeared on the blockchain, and a covert transfer process has been initiated. This discovery once again highlights the severe security challenges faced by wallets in the crypto ecosystem.

Complete Exposure of Fund Flow

CertiK’s tracking shows that approximately $63 million of the stolen funds have been exchanged through the ThorSwap cross-chain bridge. Specifically, these funds were converted into 19,632 ETH and sent to address 0xF73a…5cc21. Subsequently, the funds were further dispersed, split into multiple different wallet addresses, indicating that the attacker adopted a layered transfer strategy to evade tracking.

Large ETH Funds Appear in Privacy Mixing Protocols

More notably, at least 800 ETH from the aforementioned related address flowed into Tornado Cash—a well-known privacy mixing protocol. This indicates that the attacker is not only transferring funds but also using mixing technology to obscure the source and transaction trail of the funds. Tornado Cash uses smart contracts to mix user funds, making on-chain tracking extremely difficult and serving as a significant tool for money laundering.

On-Chain Security Continues to Face Challenges

This incident reflects that the current crypto wallet ecosystem still has serious security vulnerabilities. From theft to fund mixing, the entire process is traceable on-chain, but the defensive side remains passive. Security agencies can track the flow of funds but find it difficult to effectively prevent them from entering privacy mixing pools. This serves as a reminder to users and wallet developers to strengthen private key management, multi-signature verification, and other protective measures to minimize the risk of attacks.

ETH2,54%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
0/400
No comments
  • Pin

Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)