CertiK detected new on-chain movements linked to a $282 million hack that occurred on January 10, which reportedly involved the compromise of a wallet. According to the security firm, around $63 million of the stolen funds have already started to move, marking the beginning of an active laundering phase through Tornado Cash.
On-chain tracking shows that the attacker consolidated large balances into Bitcoin and Litecoin wallets, including more than 1,100 BTC and 2.05 million LTC. The attacker then sent roughly 686 BTC to Ethereum via ThorSwap, where the funds were converted into 19,632 ETH. From there, the ETH was distributed across multiple addresses through repeated transfers of 400 ETH, a common pattern used to hinder tracing. Part of those funds has already entered Tornado Cash.
The use of a mixer indicates an attempt to break transaction traceability. The prior use of a cross-chain bridge also complicates tracking due to liquidity fragmentation and the involvement of multiple protocol layers.
For now, the remaining stolen funds, roughly $219 million, remain inactive. CertiK continues to monitor the wallets it has been able to associate with the hack and warned that an acceleration in mixer deposits could signal further movements in the short term.
Source: https://x.com/CertiKAlert/status/2013072177256423565
Disclaimer: Crypto Economy Flash News are based on verified public and official sources. Their purpose is to provide fast, factual updates about relevant events in the crypto and blockchain ecosystem.
This information does not constitute financial advice or investment recommendation. Readers are encouraged to verify all details through official project channels before making any related decisions
