#tornadocash
tornadocash
253,576 views
307 Discussing
Hot
Latest
ALERT 🚨 Order blocks on $TORN (TORNADO CASH) signal bullish momentum as liquidity expands. $AR (ARWEAVE) showcases ecosystem growth, new data storage contracts driving adoption. $AUCTION (AUCTION) sees strong trading activity, reflecting investor confidence. Strong buy on all three as innovation, volume and sentiment converge. #TornadoCash #Arweave #Auction
After the Step Finance hacker went quiet for 5 months, they suddenly acted—fully liquidating all 261,900 SOL they held, cashing out about $21.4 million.
On-chain sleuth Lookonchain traced that the funds were then bridged to Ethereum, converted into 12,128 ETH, and then dumped all at once into Tornado Cash to launder the proceeds.
A few details are worth paying attention to:
1) They chose to sell off SOL while it was relatively high, suggesting the timing was not amateurish;
2) The route—swapping from Solana to ETH and then going through a mixer—follows the standard playbook of seasoned hackers;
3) The longer the inactivity period, the more decisive the move once it happens—addresses like this will very likely carry out a second wave and third wave of liquidation later on.
For ordinary holders, there are two things to watch in the short term: first, the SOL spot market now has an additional sell-pressure source at the scale of several tens of millions of dollars; second, the ETH side is now burdened with a batch of mixer-originated funds that need to be absorbed. Money entering a mixer usually doesn’t immediately return to a CEX, but for exchange compliance teams, deposit screening in the coming weeks will likely be tighter.
Clearing the hacker’s balance doesn’t mean the story ends—it just marks the point where the funds start moving into a much harder-to-trace phase.
#StepFinance #Hack #TornadoCash
$SOL $ETH
On-chain sleuth Lookonchain traced that the funds were then bridged to Ethereum, converted into 12,128 ETH, and then dumped all at once into Tornado Cash to launder the proceeds.
A few details are worth paying attention to:
1) They chose to sell off SOL while it was relatively high, suggesting the timing was not amateurish;
2) The route—swapping from Solana to ETH and then going through a mixer—follows the standard playbook of seasoned hackers;
3) The longer the inactivity period, the more decisive the move once it happens—addresses like this will very likely carry out a second wave and third wave of liquidation later on.
For ordinary holders, there are two things to watch in the short term: first, the SOL spot market now has an additional sell-pressure source at the scale of several tens of millions of dollars; second, the ETH side is now burdened with a batch of mixer-originated funds that need to be absorbed. Money entering a mixer usually doesn’t immediately return to a CEX, but for exchange compliance teams, deposit screening in the coming weeks will likely be tighter.
Clearing the hacker’s balance doesn’t mean the story ends—it just marks the point where the funds start moving into a much harder-to-trace phase.
#StepFinance #Hack #TornadoCash
$SOL $ETH
$ETH JUST SAW A $10.5M BUY AT 1,757 – BUT THE SELLER USED TORNADO CASH 🧐
Someone moved $10.54M to buy 6,001 ETH at exactly $1,757 per coin, then mixed it through Tornado Cash. That’s a massive bid at a level that’s been a key zone on the monthly.
Whales don’t dump into privacy mixers unless they plan to exit quietly. The question is whether this was accumulation or a liquidation cover before a bigger move.
Does a coordinated buy at this level make you want to take a position, or does the mixer use scare you off?
Not financial advice. Always manage your risk.
#ETH #WhaleAlert #TornadoCash #CryptoMarket
💎
Someone moved $10.54M to buy 6,001 ETH at exactly $1,757 per coin, then mixed it through Tornado Cash. That’s a massive bid at a level that’s been a key zone on the monthly.
Whales don’t dump into privacy mixers unless they plan to exit quietly. The question is whether this was accumulation or a liquidation cover before a bigger move.
Does a coordinated buy at this level make you want to take a position, or does the mixer use scare you off?
Not financial advice. Always manage your risk.
#ETH #WhaleAlert #TornadoCash #CryptoMarket
💎
The UXLINK attacker is going on a mad money-laundering spree, buying $6.5 million worth of ETH in 30 minutes and 'disappearing' through Tornado Cash.
On-chain monitoring shows that the UXLINK attacker is ramping up their laundering activities.
Latest move: In the past 30 minutes, this attacker spent 6.5 million DAI, averaging $1,764 to scoop up 3,686 ETH, then washed the funds through Tornado Cash.
This isn't their first rodeo. Previously, the attacker swapped 92 WBTC for about 3,248 ETH and deposited 1,500 ETH into Tornado Cash. On September 22, the UXLINK multi-signature wallet suffered a loss exceeding $44 million due to a security breach.
What does this mean?
Buying $6.5 million in ETH and funneling it into a mixer is a textbook on-chain money laundering procedure. This level of capital means that the ETH market will face ongoing sell pressure in the short term—not from regular traders, but from the cash-out demands of hackers.
Tornado Cash is a privacy mixer, and once the funds go in, they are practically untraceable. The hacker's choice of this method indicates they don’t plan to leave any traces of this money on-chain.
Market impact: The UXLINK attacker is still active, and more ETH could be dumped in the future. Day traders should be wary of the potential sell pressure on ETH. On-chain tracking shows that this attacker still holds a significant amount of DAI and ETH.
#UXLINK #hacker #moneylaundering #ETH #TornadoCash #链上追踪
On-chain monitoring shows that the UXLINK attacker is ramping up their laundering activities.
Latest move: In the past 30 minutes, this attacker spent 6.5 million DAI, averaging $1,764 to scoop up 3,686 ETH, then washed the funds through Tornado Cash.
This isn't their first rodeo. Previously, the attacker swapped 92 WBTC for about 3,248 ETH and deposited 1,500 ETH into Tornado Cash. On September 22, the UXLINK multi-signature wallet suffered a loss exceeding $44 million due to a security breach.
What does this mean?
Buying $6.5 million in ETH and funneling it into a mixer is a textbook on-chain money laundering procedure. This level of capital means that the ETH market will face ongoing sell pressure in the short term—not from regular traders, but from the cash-out demands of hackers.
Tornado Cash is a privacy mixer, and once the funds go in, they are practically untraceable. The hacker's choice of this method indicates they don’t plan to leave any traces of this money on-chain.
Market impact: The UXLINK attacker is still active, and more ETH could be dumped in the future. Day traders should be wary of the potential sell pressure on ETH. On-chain tracking shows that this attacker still holds a significant amount of DAI and ETH.
#UXLINK #hacker #moneylaundering #ETH #TornadoCash #链上追踪
ALERT 🚨 SOMETHING BIG IS COMING. $TORN ( TORNADO CASH ) shows strong order block defense as volume spikes, hinting at bullish momentum. $MUBARAK ( MUBARAK ) gains traction from community adoption, boosting liquidity and investor sentiment. $PHA ( PHALA NETWORK ) benefits from ecosystem growth and innovative parachain upgrades, driving robust trading activity. 📈🔥 #Crypto #TornadoCash #MUBARAK #PhalaNetwork
Stayed silent for 5 months, and then a Step Finance hacker suddenly went on the offensive.
On-chain sleuth Lookonchain has detected that the address dumped all 261,933 $SOL at once, cashing out about $21.4 million, then bridged over to Ethereum to convert it into 12,128 $ETH and directly sent it into Tornado Cash for mixing.
A few signals are worth noting:
· A long-dormant address waking up often corresponds to a short-term release of sell pressure, so keep an eye on the SOL spot order book for any lingering wave from large dumps;
· Choosing the route "sell SOL → swap to ETH → enter TC" suggests the hacker trusts the mixing depth on the Ethereum side more than staying within the Solana ecosystem;
· Tornado Cash, which has been sanctioned for years, is still the preferred exit—on-chain tracing can help identify where funds go, but once money is pooled there, recovery becomes dramatically harder.
For ordinary users, this kind of news is a mirror—review your authorization management, cold-wallet tiering, and habits when using cross-chain bridges. The hacker’s patience is longer than most people would expect.
#Solana #链上安全 #TornadoCash
On-chain sleuth Lookonchain has detected that the address dumped all 261,933 $SOL at once, cashing out about $21.4 million, then bridged over to Ethereum to convert it into 12,128 $ETH and directly sent it into Tornado Cash for mixing.
A few signals are worth noting:
· A long-dormant address waking up often corresponds to a short-term release of sell pressure, so keep an eye on the SOL spot order book for any lingering wave from large dumps;
· Choosing the route "sell SOL → swap to ETH → enter TC" suggests the hacker trusts the mixing depth on the Ethereum side more than staying within the Solana ecosystem;
· Tornado Cash, which has been sanctioned for years, is still the preferred exit—on-chain tracing can help identify where funds go, but once money is pooled there, recovery becomes dramatically harder.
For ordinary users, this kind of news is a mirror—review your authorization management, cold-wallet tiering, and habits when using cross-chain bridges. The hacker’s patience is longer than most people would expect.
#Solana #链上安全 #TornadoCash
After the Step Finance hacker went quiet for five months, they suddenly struck: they liquidated all 261,933 SOL (about $21.4 million) at once, wiping the holdings. Immediately after, they bridged to Ethereum, exchanged it for 12,128 ETH, and then dumped it all into Tornado Cash to launder it.
A few details are worth watching:
1) The tempo — not a slow, incremental selloff, but a one-stop sequence: sell, bridge, then mix. This clearly bets on the market’s ability to absorb the sell pressure and on the timing gap for on-chain tracing;
2) The route — SOL → ETH → Tornado. It’s almost a textbook move from an old wallet, suggesting that hackers of this type still lack confidence in draining funds from the Solana ecosystem and ultimately return to Ethereum for the final stage of laundering;
3) The timing — acting after such a long period of silence often means they believe the news cycle has cooled and monitoring has relaxed. This is also the moment when on-chain investigators are most likely to set up reverse ambushes.
The lesson for ordinary users is straightforward: the stolen-funds wallets from old cases won’t disappear—they’re just waiting for a liquidity window. When you see large $SOL suddenly move and get dumped to a CEX or a bridge, stay one notch more alert and don’t be the one on the receiving end.
#OnChainAnalysis #Hack #TornadoCash
A few details are worth watching:
1) The tempo — not a slow, incremental selloff, but a one-stop sequence: sell, bridge, then mix. This clearly bets on the market’s ability to absorb the sell pressure and on the timing gap for on-chain tracing;
2) The route — SOL → ETH → Tornado. It’s almost a textbook move from an old wallet, suggesting that hackers of this type still lack confidence in draining funds from the Solana ecosystem and ultimately return to Ethereum for the final stage of laundering;
3) The timing — acting after such a long period of silence often means they believe the news cycle has cooled and monitoring has relaxed. This is also the moment when on-chain investigators are most likely to set up reverse ambushes.
The lesson for ordinary users is straightforward: the stolen-funds wallets from old cases won’t disappear—they’re just waiting for a liquidity window. When you see large $SOL suddenly move and get dumped to a CEX or a bridge, stay one notch more alert and don’t be the one on the receiving end.
#OnChainAnalysis #Hack #TornadoCash
After 5 months of silence, the Step Finance hacker suddenly struck—dumping all 261,933 SOL (about $21.4 million) they held, cross-chained to Ethereum to convert it into 12,128 ETH, and then shoved it all into Tornado Cash to launder it.
This kind of operational path is basically a “textbook” old playbook: SOL liquidation → bridge to ETH → use a mixer. Choosing this moment to act likely reflects a belief that on-chain tracking attention has cooled off, or that ETH liquidity and mixer depth are more suitable for getting away.
Points worth noting:
1) The selling impact. A concentrated sell-off of 260,000+ SOL, combined with exchanging via a bridge into ETH, would likely create short-term selling pressure on $SOL and also leave clear traces at the cross-chain bridge.
2) Tornado Cash is still the hacker’s go-to option, suggesting that regulatory and compliance pressure hasn’t truly cut off its usability. The privacy channels in the $ETH ecosystem remain an exit route for illicit actors.
3) The “silence—then concentrated liquidation” timing is something to watch closely, including other previously compromised addresses. Many older wallets may gradually get unfrozen.
For ordinary users, this kind of news is not a market signal—it’s a reminder: on-chain activity is not truly anonymous; it’s only “delayed disclosure,” and hackers can’t outrun time.
#SOL #TornadoCash #On-chain tracking
This kind of operational path is basically a “textbook” old playbook: SOL liquidation → bridge to ETH → use a mixer. Choosing this moment to act likely reflects a belief that on-chain tracking attention has cooled off, or that ETH liquidity and mixer depth are more suitable for getting away.
Points worth noting:
1) The selling impact. A concentrated sell-off of 260,000+ SOL, combined with exchanging via a bridge into ETH, would likely create short-term selling pressure on $SOL and also leave clear traces at the cross-chain bridge.
2) Tornado Cash is still the hacker’s go-to option, suggesting that regulatory and compliance pressure hasn’t truly cut off its usability. The privacy channels in the $ETH ecosystem remain an exit route for illicit actors.
3) The “silence—then concentrated liquidation” timing is something to watch closely, including other previously compromised addresses. Many older wallets may gradually get unfrozen.
For ordinary users, this kind of news is not a market signal—it’s a reminder: on-chain activity is not truly anonymous; it’s only “delayed disclosure,” and hackers can’t outrun time.
#SOL #TornadoCash #On-chain tracking
Jaredfromsubway's attacker funneled 2000 ETH via Tornado Cash and has already shorted 1422 ETH. #ETH #TornadoCash #Jaredfromsubway
Explorer #UXLİNK is stacking $ETH by washing funds through #TornadoCash .
In the last 30 minutes, explorer #uxlink has shelled out 6.5 million DAI to scoop up 3,686 $ETH at an average price of $1.764.
#Whale.Alert #SECChairAtkinsReformsIPOAccess
In the last 30 minutes, explorer #uxlink has shelled out 6.5 million DAI to scoop up 3,686 $ETH at an average price of $1.764.
#Whale.Alert #SECChairAtkinsReformsIPOAccess
HACK ALERT
A major exploit has reportedly drained approximately $1.1 million from the LABUBU ecosystem.
According to on-chain investigators, the attacker exploited a vulnerability linked to the OLPC contract’s _update function, where decimalsValue had been set to an abnormally large number (reportedly over 7.3 quintillion) around 46 days earlier.
This manipulation allowed the attacker to use a relatively small amount of OLPC to extract a large portion of LABUBU and other assets from the liquidity pool.
📊 Key Details:
🔹 Estimated loss: ~$1.1M
🔹 Funds swapped into USDT
🔹 Bridged to Ethereum
🔹 633 ETH sent to Tornado Cash
🔹 Ownership was later renounced to the zero address
The incident highlights once again how hidden contract risks and privileged parameter changes can remain unnoticed for weeks before being exploited.
⚠️ Always review contract permissions and ownership structures before investing in newly launched tokens.
#Hack #LABUBU #TornadoCash
A major exploit has reportedly drained approximately $1.1 million from the LABUBU ecosystem.
According to on-chain investigators, the attacker exploited a vulnerability linked to the OLPC contract’s _update function, where decimalsValue had been set to an abnormally large number (reportedly over 7.3 quintillion) around 46 days earlier.
This manipulation allowed the attacker to use a relatively small amount of OLPC to extract a large portion of LABUBU and other assets from the liquidity pool.
📊 Key Details:
🔹 Estimated loss: ~$1.1M
🔹 Funds swapped into USDT
🔹 Bridged to Ethereum
🔹 633 ETH sent to Tornado Cash
🔹 Ownership was later renounced to the zero address
The incident highlights once again how hidden contract risks and privileged parameter changes can remain unnoticed for weeks before being exploited.
⚠️ Always review contract permissions and ownership structures before investing in newly launched tokens.
#Hack #LABUBU #TornadoCash
Aztec suffers a double blow. This month, Bridge and Connect were hacked one after the other, resulting in an asset loss of around $4 million. The attackers have already laundered the funds through Tornado Cash, and on-chain trust is nearing collapse.
Currently, $AZTEC is priced at $0.01412, with a market cap of $40.65 million, and only $3.97 million in 24H trading volume. Thin liquidity combined with security incidents means selling pressure has not fully been released; continued short-term downside is likely.
Watch three things: the official follow-up compensation plan, monitoring of the stolen funds’ flow, and whether the cross-chain bridge audit report has been completed. Until these are clear, it’s not advisable to blindly bottom-fish. Any rebound is more likely to be an escape window than a reversal signal.
Security incidents do not only cause a one-time discount to small-cap assets—they also rebuild the valuation anchor.
#Aztec #跨链桥安全 #TornadoCash
Currently, $AZTEC is priced at $0.01412, with a market cap of $40.65 million, and only $3.97 million in 24H trading volume. Thin liquidity combined with security incidents means selling pressure has not fully been released; continued short-term downside is likely.
Watch three things: the official follow-up compensation plan, monitoring of the stolen funds’ flow, and whether the cross-chain bridge audit report has been completed. Until these are clear, it’s not advisable to blindly bottom-fish. Any rebound is more likely to be an escape window than a reversal signal.
Security incidents do not only cause a one-time discount to small-cap assets—they also rebuild the valuation anchor.
#Aztec #跨链桥安全 #TornadoCash
🚨 $DRIFT ATTACKER AWAKENS – 100 ETH EVERY MINUTE INTO TORNADO CASH! 💣
📌 After three months of dormancy, the Drift Protocol exploiter is now systematically funneling funds through Tornado Cash Router at 100 ETH per transaction, with multiple deposits per minute. 📊 This high-frequency layering signals intent to liquidate or obfuscate—a classic post-exploit cash-out pattern.
💡 This on-chain behavior creates overhead supply pressure for $DRIFT , as the attacker likely accumulated sell-side liquidity before pausing. The market should watch for sudden volume spikes on top-tier exchanges. 💬 Do you think this will drive a fear-driven selloff, or has the market already priced in the eventual dump? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #DRIFT #OnChain #Security #CryptoAlert #TornadoCash
🦈 🔍
📌 After three months of dormancy, the Drift Protocol exploiter is now systematically funneling funds through Tornado Cash Router at 100 ETH per transaction, with multiple deposits per minute. 📊 This high-frequency layering signals intent to liquidate or obfuscate—a classic post-exploit cash-out pattern.
💡 This on-chain behavior creates overhead supply pressure for $DRIFT , as the attacker likely accumulated sell-side liquidity before pausing. The market should watch for sudden volume spikes on top-tier exchanges. 💬 Do you think this will drive a fear-driven selloff, or has the market already priced in the eventual dump? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #DRIFT #OnChain #Security #CryptoAlert #TornadoCash
🦈 🔍
🛡️ $ETH ATTACKER DUMPS 6M DAI THROUGH TORNADO CASH – WHALES MARKING THEIR TERRITORY? 💥
📌 The Summer Fi exploiter hasn’t stopped moving funds since July 6. Over 6M DAI has been cycled through Tornado Cash in a steady, deliberate flow — textbook obfuscation by someone who knows order flow intimately. 🔍
💡 Two wallets still hold ~294 ETH combined — that’s over half a million in dry powder. These aren’t panic moves; they’re calculated exits. The market hasn’t reacted yet, but when big money washes through privacy layers, liquidity can vanish in seconds. 💬 Is this a precursor to a broader selloff, or just a ghost sweeping dust? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #ETH #DeFi #TornadoCash #WhaleAlert #CryptoSecurity
🦈 🔍
📌 The Summer Fi exploiter hasn’t stopped moving funds since July 6. Over 6M DAI has been cycled through Tornado Cash in a steady, deliberate flow — textbook obfuscation by someone who knows order flow intimately. 🔍
💡 Two wallets still hold ~294 ETH combined — that’s over half a million in dry powder. These aren’t panic moves; they’re calculated exits. The market hasn’t reacted yet, but when big money washes through privacy layers, liquidity can vanish in seconds. 💬 Is this a precursor to a broader selloff, or just a ghost sweeping dust? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #ETH #DeFi #TornadoCash #WhaleAlert #CryptoSecurity
🦈 🔍
ALERT 🚨 $MANTA ( MANTA NETWORK ) is breaking out of a key order block with strong volume and momentum, signalling bullish adoption in privacy focused DeFi. $TORN ( TORNADO CASH ) sees a liquidity surge as institutional traders reenter the protocol, boosting ecosystem growth. $YFI ( YIELD FARMING ) maintains high trading activity, reinforcing investor confidence. Strong buy signal across the trio. #Crypto #DeFi #MantaNetwork #TornadoCash #YearnFinance
$21M IN $ETH SENT TO TORNADO CASH IN 2 HOURS – SUSPICIOUS FLOW 🔥
Body:
Six wallets with 4+ years of on-chain history just moved 12,128 ETH ($21.35M) into Tornado Cash within a two-hour window. The funds were bridged from Solana via Circle CCTP, all at an average price of $1,760. This is not retail behavior—it’s programmed, deliberate, and rare for wallets of this age.
Structural urgency: the average buy price aligns closely with current market levels, meaning these entities may be hedging or preparing a position shift. Tornado Cash usage after such a long dormancy often precedes market moves.
What do you think is the real intent here—privacy or preparation for something bigger?
Not financial advice. Always manage your risk.
#ETH #OnChain #WhaleAlert #TornadoCash #Crypto
🔥
Body:
Six wallets with 4+ years of on-chain history just moved 12,128 ETH ($21.35M) into Tornado Cash within a two-hour window. The funds were bridged from Solana via Circle CCTP, all at an average price of $1,760. This is not retail behavior—it’s programmed, deliberate, and rare for wallets of this age.
Structural urgency: the average buy price aligns closely with current market levels, meaning these entities may be hedging or preparing a position shift. Tornado Cash usage after such a long dormancy often precedes market moves.
What do you think is the real intent here—privacy or preparation for something bigger?
Not financial advice. Always manage your risk.
#ETH #OnChain #WhaleAlert #TornadoCash #Crypto
🔥
$OST HACKED - $23.75M DRAINED TO TORNADO CASH 🔥
The exploit hit Ostium hard — 23.75 million USDC swept out and already being mixed through Tornado Cash. That's a massive chunk of liquidity gone with no recovery path.
This isn't just a small bug. It's a coordinated extraction. The funds are gone beyond traceability now. If you had anything in Ostium pools, check your balances immediately.
Are you still holding any exposure to this protocol?
Not financial advice. Always manage your risk.
#OST #Exploit #DeFi #TornadoCash #CryptoAlert
🔥
The exploit hit Ostium hard — 23.75 million USDC swept out and already being mixed through Tornado Cash. That's a massive chunk of liquidity gone with no recovery path.
This isn't just a small bug. It's a coordinated extraction. The funds are gone beyond traceability now. If you had anything in Ostium pools, check your balances immediately.
Are you still holding any exposure to this protocol?
Not financial advice. Always manage your risk.
#OST #Exploit #DeFi #TornadoCash #CryptoAlert
🔥
$ETH HACKER DUMPED 12M USDC INTO ETH AND SENT 10K TO TORNADO CASH 💸
A PeckShield report just dropped — Ostium's OLP treasury got hit for 24M USDC. The attacker flipped it all into roughly 12,080 ETH right on-chain, then sent 10,540 ETH straight to Tornado Cash. That's a massive chunk of liquidity moving through a mixer in real time.
Market makers are watching the ETH order book closely right now. If this was a coordinated exit, we could see a mini liquidity vacuum on the bid side. But it could also be a one-off exploit dump.
How do you think this affects ETH price action over the next 24 hours?
Not financial advice. Always manage your risk.
#ETH #Hack #TornadoCash #Security #Crypto
💎
A PeckShield report just dropped — Ostium's OLP treasury got hit for 24M USDC. The attacker flipped it all into roughly 12,080 ETH right on-chain, then sent 10,540 ETH straight to Tornado Cash. That's a massive chunk of liquidity moving through a mixer in real time.
Market makers are watching the ETH order book closely right now. If this was a coordinated exit, we could see a mini liquidity vacuum on the bid side. But it could also be a one-off exploit dump.
How do you think this affects ETH price action over the next 24 hours?
Not financial advice. Always manage your risk.
#ETH #Hack #TornadoCash #Security #Crypto
💎
Log in to explore more content