The Harmony attacker is sending 100 ETH to the Tornado Cash router every six minutes and has already mixed over $12 million via the protocol.
Every six minutes, 100 ETH is distributed
The Harmony attacker has begun sending tokens via Tornado Cash.
According to Etherscan, the wallet responsible for last week’s Harmony exploit transferred a little more than 18,036 ETH (nearly $21 million at today’s prices) to a secondary wallet.
That secondary wallet then distributed the funds equally among three tertiary wallets; at the time of writing, two of these tertiaries had sent ETH to a Tornado Cash router.
Last week, Harmony’s Horizon bridge was used to steal more than $100 million in tokens such as FRAX, FXS, wETH, wBTC, AAVE, SUSHI, USDT, and BUSD, which were then exchanged for ETH on Uniswap.
This sum is now being transferred through Tornado Cash in 100 ETH instalments.
At the time of writing, the privacy-enabling protocol had already received 10,409 ETH (more than $12 million). Every six minutes, a new 100 ETH transaction is completed.
Tornado Cash is an Ethereum protocol that uses zero-knowledge technology to let users break the chains of their on-chain activity. The protocol, when used correctly, makes it impossible to trace transactions from one wallet to another.
Hackers have previously used the protocol to cash in on their ill-gotten gains.
According to data, despite only sending about 12% of their loot to Tornado Cash, the Harmony exploiter is already the fifth-largest malicious user of the protocol (behind the Ronin, Fei, Beanstalk, and Parity exploiters).
Harmony had offered the Horizon bridge hacker a $1 million reward for returning the stolen funds two days prior, with the promise of not pursuing criminal charges if they chose to cooperate. Other protocols have paid out even larger bounties in the past, with Aurora recently rewarding a white-hat hacker $6 million for detecting and reporting a possible exploit.
To read our blog on “Money laundering case: PM Shahbaz claims he never received a salary as chief minister,” click here
