An individual involved in a phishing attack in September 2023 has transferred $10 million in Ether to the cryptocurrency mixing platform Tornado Cash.
The security firm CertiK flagged the account on March 21st after it was found to have moved 3,700 ETH, which was taken from a crypto whale during the $24 million hack.
This hack occurred when the investor lost $24 million in staked ETH on Rocket Pool, with the attacker taking a total of 14,510 tokens through two separate transactions.
The victim unknowingly enabled token approvals for the hacker by signing an “Increase Allowance” transaction, which allowed the hacker to spend the tokens through malicious smart contracts.
The hacker then exchanged the stolen assets for 13,785 ETH and 1.64 million Dai, with some of the Dai being transferred to the FixedFloat exchange and the rest being moved into other wallets.