Deribit Hacker Has Started Moving the Stolen $28M to Tornado Cash

Less than a week after exploiting the leading cryptocurrency derivatives exchange Deribit, the attacker started moving the stolen funds.

As of November 5, the hacker had moved 1,610 Ether (ETH) worth over $2.5 million to the U.S.-sanctioned crypto mixer Tornado Cash, leaving a balance of about 7,501 ETH in the address.

What Happened?

On November 2, CryptoPotato reported that Deribit lost $28 million in a hot wallet exploit. The hacker made away with crypto assets such as Bitcoin (BTC), ETH, and USD Coin (USDC).

The exchange was forced to pause withdrawals and deposits as it tried to control the situation by conducting security checks. Deribit told users that all losses would be covered by its reserves and not the insurance fund, assuring them that clients’ assets, including those in cold storage, were unaffected.

The platform resumed activities that same day after migrating all hot wallets to crypto custodian Fireblocks. The exchange also instructed users to refrain from sending funds to their previous BTC, ETH, and USDC addresses, as they could be exploited again. Users were asked to use Fireblocks deposit addresses instead.

Deribit Stolen Funds on the Move

Two days later, the hacker started moving the funds to Tornado. According to data from Ethereum block explorer Etherscan, the attacker moved 1,610 ETH in 17 transactions, 16 with 100 ETH and one with 10. 

The attacker initially transferred 9,080 ETH to the depositing address on the day of the exploit. The wallet address held 7,501 ETH worth over $11.8 million at press time.

Hackers Not Relenting

Deribit’s exploit happened just after October finished with a record $650 million loss from 44 hacks affecting 53 DeFi projects. 

Hackers seem relentless as they dig deep into crypto platforms and smart contracts to exploit vulnerabilities. Barely a week into November, over $30 million has been stolen from crypto projects, including Skyward Finance. 

The post Deribit Hacker Has Started Moving the Stolen $28M to Tornado Cash appeared first on CryptoPotato.

Related Posts

Digital identity platform integrates with zkSync for on-chain KYC

RNS.ID’s on-chain KYC solution is designed on a “privacy engine” to encrypt users’ data. RNS.id, a digital Web3 identity platform developed to support the application and issuance…

European Central Bank blasts Bitcoin —community responds

After the European Central Bank released a blog post on the shortcomings of Bitcoin, the crypto community on Twitter took to the comments to defend the cryptocurrency….

Ukraine to launch CBDC to fight crisis – Will it be based on Stellar Lumens?

Ukraine plans to make its Stellar-based CBDC to support retail cryptocurrency payments.  Stellar has also been partnering with other countries to develop their CBDCs. The National Bank…

Should you start your crypto trading journey?

Interest in digital currencies has increased considerably during the last couple of years, so the vast world of cryptocurrencies lures more and more individuals. Though, there are…

Cardano partners with 2 industry leaders in Web3 – Will it drive ADA price to $2?

Cardano’s commercial arm EMURGO announced investments in OAK Network and SubQuery protocol to expand its footprint in the Web3. The total number of smart contracts built atop…

Bitcoin, Ethereum Technical Analysis: BTC Moves Above $17,000 on Wednesday

Bitcoin moved to $17,000 on Wednesday, as markets continued to digest the U.S. consumer confidence report. Confidence amongst consumers fell to its lowest level since July, despite…

Generated by Feedzy