Coinbase hacker continues to launder ETH via Tornado Cash

Photo - Coinbase hacker continues to launder ETH via Tornado Cash
The hacker who stole more than $300 million from Coinbase users is actively moving funds across multiple blockchains, using Tornado Cash to launder Ethereum and purchasing large amounts of Solana, according to monitoring by Onchain Lens.
Blockchain data shows the hacker has received 5,514 ETH, worth about $24.04 million, into a wallet that is gradually sending withdrawals through Tornado Cash. At the same time, the attacker has bought 38,126 SOL valued at $8 million within two hours and previously acquired 4,863 ETH for $12.5 million DAI.

The addresses linked to the hacker include 7reyCVVxQpkBjFxauBtdzBWynEh3y6MvGPwuRwwn7Doh on Solana and 0xcC434153CD323b8537d245920a8e8e0Aa3C3c638 on Ethereum, according to Onchain Lens. These wallets remain under close watch as the hacker continues to diversify holdings and move assets through different channels.

The hacker still controls approximately $45.36 million DAI across two wallets, suggesting further purchases of ETH or other cryptocurrencies may follow. 

Tornado Cash, sanctioned by the U.S. Treasury in 2022, has long been associated with money laundering and sanctioned actors, including North Korean-linked groups. Its use in this case underscores the persistent challenge regulators and law enforcement face in tracking stolen digital assets. Security experts note that the gradual dispersal of funds across Tornado Cash and multiple blockchains complicates potential recovery efforts.