{"id":131377,"date":"2023-01-19T12:12:12","date_gmt":"2023-01-19T12:12:12","guid":{"rendered":"https:\/\/crypto-economy.com\/?p=131377"},"modified":"2023-01-19T12:50:32","modified_gmt":"2023-01-19T12:50:32","slug":"raydium-protocol-hacker-sends-2-7m-to-tornado-mixer","status":"publish","type":"post","link":"https:\/\/crypto-economy.com\/raydium-protocol-hacker-sends-2-7m-to-tornado-mixer\/","title":{"rendered":"Raydium protocol Hacker Sends $2.7M to Tornado Mixer"},"content":{"rendered":"<p style=\"text-align: justify\">Blockchain security firm CertiK posted an alert citing the exploiter of Solana DeFi protocol Raydium sent 1,774.5 <strong><a href=\"https:\/\/crypto-economy.com\/what-is-ethereum\/\" target=\"_blank\" rel=\"noopener\">Ethereum (ETH)<\/a><\/strong> to Tornado Cash, a decentralized, noncustodial privacy platform. <!--more--><\/p>\n<p style=\"text-align: justify\">On December 16, Raydium was hacked for more than $2 million including $1.6 million worth of Solana (SOL). As per reports, the hacker likely had access to Raydium\u2019s private keys that managed project pools, allowing them to drain the cryptocurrencies. As per crypto sleuth, ZachXBT, <strong>the attacker had since transferred the stolen funds to an Ethereum wallet<\/strong>. Some of that money was then sent to crypto mixing service Tornado Cash.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">An exploit on Raydium is being investigated that affected liquidity pools. Details to follow as more is known<\/p>\n<p>\u2070Initial understanding is owner authority was overtaken by attacker, but authority has been halted on AMM &amp; farm programs for now<br \/>Attacker accnt<a href=\"https:\/\/t.co\/ZnEgL1KSwz\" target=\"_blank\">https:\/\/t.co\/ZnEgL1KSwz<\/a><\/p>\n<p>&mdash; Raydium (@RaydiumProtocol) <a href=\"https:\/\/twitter.com\/RaydiumProtocol\/status\/1603762271028748289?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">December 16, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p style=\"text-align: justify\">However, Raydium revealed the hacker drained the crypto loot by exploiting a <strong>vulnerability in the DEX\u2019s smart contracts that allowed entire liquidity pools to be withdrawn<\/strong> by admins, despite existing protections being to prevent such behavior. Raydium had also proposed a plan to compensate the victims of the hacks, using the decentralized autonomous organization treasury to buy missing tokens and repaying those affected by the exploit.<\/p>\n<h2 style=\"text-align: justify\">A Warning Regarding Tornado Cash<\/h2>\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#CertiKSkynetAlert<\/a> \ud83d\udea8<\/p>\n<p>We are seeing ~1,774.5 ETH (~$2.7M) being deposited into <a href=\"https:\/\/twitter.com\/TornadoCash?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@TornadoCash<\/a> from the Raydium exploiter 0xb98ac as labeled on <a href=\"https:\/\/t.co\/lb2v6r8c4s\" target=\"_blank\">https:\/\/t.co\/lb2v6r8c4s<\/a>.<\/p>\n<p>Stay vigilant! <a href=\"https:\/\/t.co\/JVqWAw9MVO\" target=\"_blank\">pic.twitter.com\/JVqWAw9MVO<\/a><\/p>\n<p>&mdash; CertiK Alert (@CertiKAlert) <a href=\"https:\/\/twitter.com\/CertiKAlert\/status\/1615977628627787776?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">January 19, 2023<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p style=\"text-align: justify\">On January 19, CertiK took to Twitter to warn that the exploiter sent 1,774.5 Ether amounting to nearly $2.7 million to the sanctioned cryptocurrency mixer Tornado Cash. On August 8th, Tornado Cash was <strong><a href=\"https:\/\/home.treasury.gov\/news\/press-releases\/jy0916\" target=\"_blank\" rel=\"noopener\">sanctioned<\/a><\/strong> by the U.S. Treasury\u2019s Office of Foreign Assets Control (OFAC) for its role in laundering over <strong>$455 million worth of cryptocurrency<\/strong> stolen by the North Korean-linked hacking organization Lazarus Group. As per blockchain analysis firm Chainalysis, almost 30% of the funds sent through the mixer have been tied to illicit actors.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter wp-image-131396 size-full\" src=\"https:\/\/crypto-economy.com\/wp-content\/uploads\/2023\/01\/image-2023-01-19T173057.731-e1674129753991.jpg\" alt=\"Raydium protocol Hacker Sends $2.7M to Tornado Mixer\" width=\"798\" height=\"326\" srcset=\"https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/01\/image-2023-01-19T173057.731-e1674129753991.jpg 798w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/01\/image-2023-01-19T173057.731-e1674129753991-300x123.jpg 300w, https:\/\/crypto-economy.com\/\/wp-content\/uploads\/2023\/01\/image-2023-01-19T173057.731-e1674129753991-768x314.jpg 768w\" sizes=\"(max-width: 798px) 100vw, 798px\" \/><\/p>\n<p style=\"text-align: justify\">Since the US Treasury Department banned Tornado Cash, funds of many users got stuck within the platform. Hence, the US Treasury Department has issued a guide last year for US citizens to help them in withdrawing funds from the mixer.<\/p>\n<h2 style=\"text-align: justify\">Tornado Triggers Drastic Actions<\/h2>\n<p style=\"text-align: justify\">Soon after the sanctions, several web3 platforms such as Alchemy and Infura <strong>blocked access<\/strong> to the Ethereum-based crypto mixing service.\u00a0Github went on to delete accounts of Tornado\u2019s contributors immediately after the privacy tool was added to the Treasury\u2019s sanctions list. Stablecoin issuer\u00a0Circle also <strong>froze USDC funds<\/strong> held within Tornado Cash\u2019s\u00a0smart contracts.<\/p>\n<p style=\"text-align: justify\">In August, Dutch authorities arrested a 29-year-old developer in Amsterdam who was suspected to have been involved in\u00a0laundering money through Tornado Cash. In June 2022, the Dutch government&#8217;s Financial Advanced Cyber Team (FACT) initiated a criminal investigation against Tornado Cash claiming the mixer may have been used to hide large-scale criminal money flows, including from crypto heists and scams.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Blockchain security firm CertiK posted an alert citing the exploiter of Solana DeFi protocol Raydium sent 1,774.5 Ethereum (ETH) to Tornado Cash, a decentralized, noncustodial privacy platform.<\/p>\n","protected":false},"author":21,"featured_media":131421,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84,74],"tags":[4659,5287,4708],"_links":{"self":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/131377"}],"collection":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/comments?post=131377"}],"version-history":[{"count":0,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/posts\/131377\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media\/131421"}],"wp:attachment":[{"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/media?parent=131377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/categories?post=131377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crypto-economy.com\/wp-json\/wp\/v2\/tags?post=131377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}