News linked to both this project and an event.
Odaily News: According to on-chain detective Specter's monitoring, the victim claimed that due to a Coldcard hack, funds were transferred from Bitcoin to Ethereum. However, on-chain data shows that the 73 BTC ($4.6 million) originally came from the Whirlpool coin mixer two weeks ago, with some of it bridged to Ethereum and subsequently deposited through a phishing Tornado Cash interface. Two coin mixers were used during the fund transfer process. The individual was also found to have appeared in Telegram groups involving private key searches and brute-force attacks. On-chain detective Specter stated that the victim may be a threat actor, and their funds may have been stolen by another threat actor.
According to monitoring by on-chain analyst Ember (@EmberCN), a hacker address associated with Tornado Cash bought 18,273 ETH at an average price of $2,109, spending 38.535 million DAI/USDS over the past 5 hours during today's strong ETH rebound. It is reported that the aforementioned stablecoins originated from 17,124 ETH the hacker received from Tornado Cash 9 months ago, which were all sold at an average price of approximately $3,308 at that time to be held as stablecoins, and were bought back to rebuild positions today taking advantage of the significant ETH rebound.
Odaily News According to on-chain analyst Yu Jian's monitoring, a hacker spent 38.535 million DAI/USDS to buy 18,273 ETH over the past 5 hours, at a purchase price of $2,109. The aforementioned stablecoins came from 17,124 ETH received from Tornado Cash 9 months ago. The hacker subsequently sold the ETH at an average price of approximately $3,308 and converted it into DAI and USDS for holding. Today, during the ETH rebound, the hacker repurchased ETH.
According to monitoring by on-chain analyst Onchain Lens (@OnchainLens), the Pando Rings exploiters have become active again after two months of silence, swapping 3 million DAI for approximately 1,570 ETH (worth about $3 million) via CoW Protocol, and subsequently transferring 800 ETH (about $1.52 million) of them into the mixer Tornado Cash through eight transactions, suspected of laundering funds. Pando Rings previously suffered an oracle manipulation attack in November 2022, losing about $20 million.
Odaily News: According to Onchain Lens monitoring, addresses associated with the Solana OG attacker (0xd229...9D15, 0x501...f051) have transferred 2,290 ETH, worth $4.39 million, to Tornado Cash. This operation occurred nearly a month after the $14.2 million attack incident; the same cluster of addresses also used Tornado Cash two weeks ago.
On-chain data shows that the address labeled as the Aztec attacker has deposited another 300 ETH into Tornado Cash, worth approximately $572,000. To date, the address has transferred a total of 500 ETH to Tornado Cash.
According to monitoring by on-chain analyst Ai Yi (@ai_9684xtpa), the hacker address that previously attacked the MEV bot Jaredfromsubway.eth and caused over $7.5 million in losses has shown unusual fund activity again after one month. Approximately 10 hours ago, the address used the remaining 2.44 million DAI to buy 1,277 ETH. Analysis suggests that the relevant funds may next be mixed via Tornado Cash, and this asset may also be the hacker's last pending on-chain funds.
Odaily News According to on-chain analyst Ai Yi's monitoring, the hacker who attacked the MEV bot Jaredfromsubway.eth and caused it to lose over $7.5 million spent the final 2.44 million DAI to purchase 1,277 ETH 10 hours ago. This amount represented the hacker's last pending funds on-chain, and the next step may involve mixing the funds through Tornado Cash.
CertiK 表示，其监测系统发现两笔各 200 ETH 的交易转入 Tornado Cash，相关资金与正在进行的 Coldcard Wallet 攻击事件有关。上述资金此前通过 THORChain 由 BTC 跨链转入以太坊地址，随后再被转入 Tornado Cash。
According to on-chain analyst PeckShield (@PeckShieldAlert), the address labeled "Drift Exploiter" has deposited 23,095.1 ETH (approximately $44.4 million) into Tornado Cash for mixing, and additionally transferred 0.85 ETH to Bybit.
on-chain investigator ZachXBT stated that the cross-chain bridge protocol TeleSwap was suspected of being attacked on July 15, 2026, resulting in losses exceeding $735,000. However, as of five days after the incident, the project team has not yet publicly disclosed the relevant situation.ZachXBT stated that shortly after suspicious fund outflows were detected, TeleSwap's Bitcoin hot wallet stopped processing transactions. About two hours ago, the attacker transferred the stolen funds into the privacy mixing protocol Tornado Cash.
Odaily reports, perpetual contract DEX Ostium stated that platform trading remains paused following a security incident. User positions remain open but cannot be modified for now, and trading margin funds are still held in the frozen trading smart contract without any movement.Ostium stated that its team is continuously coordinating with relevant authorities, SEAL 911, and multiple security researchers. Updates regarding the resumption of smart contract activities and the timeline for fund recovery will be released subsequently.According to PeckShield monitoring, approximately 24 million USDC from Ostium's public OLP vault was stolen. The attacker subsequently swapped these funds for approximately 12,100 ETH, of which about 10,500 ETH was transferred to Tornado Cash.
According to monitoring by on-chain analyst PeckShield (@PeckShieldAlert), the public OLP vault of decentralized perpetual contract protocol Ostium (@Ostium) was attacked, with approximately 24 million USDC stolen. The attacker subsequently swapped the stolen funds for 12,080 ETH and has transferred 10,540 ETH into the mixer Tornado Cash to obscure the fund flow. On-chain tracing shows that the attacker's initial funds originated from ChangeNow and Bybit, with 1 ETH transferred from each to the attacker's wallet (0x321D...8bfD9).
: According to monitoring by on-chain analyst Yu Jin, the hacker (0x18B...E66) who stole funds from a Coinbase user spent 7.378 million DAI early this morning to buy 4,049.7 ETH at a price of $1,822. Meanwhile, the address (0xa13...628) that received ETH from Tornado Cash last November had previously transferred out 4,978 ETH and exchanged them for 16.294 million DAI at a price of $3,273. Today, two hours ago, this address spent 4.34 million DAI to repurchase 2,405 ETH at a price of $1,804.
Odaily Odaily News According to Onchain Lens monitoring, on July 6, the Summer.fi attacker wallet (0x7BF...b3bdca) received 6.017 million DAI from the Summer.fi attack incident; subsequently, 1.35 million DAI have been transferred, swapped for ETH via Uniswap, and then sent to Tornado Cash through a second wallet (0x46e...eba7). The original wallet still holds approximately 4.67 million DAI, while the second wallet still holds 50 ETH.
According to Lookonchain, the Step Finance attacker, after 5 months of inactivity, sold all 261,933 SOL, worth $21.4 million. The funds were then bridged to Ethereum to purchase 12,128 ETH, which were subsequently deposited into Tornado Cash to launder the money.
decentralized privacy protocol hinkal has released an update on a security incident, confirming that an attacker extracted approximately 797,000 USDC from its Ethereum contract through a series of transactions and exchanged it for about 454 ETH. Of this, roughly 410 ETH was subsequently transferred to Tornado Cash, while the remaining approximately 44.67 ETH was bridged to the Bitcoin network via THORChain. hinkal is currently collaborating with an external security team to trace the flow of funds.hinkal stated that the impact of this security incident is limited to the relevant fund pools on the Ethereum chain, and contracts on other chains remain unaffected. However, all contracts have been temporarily suspended for fixes and security verification. All affected users will be fully compensated at a 1:1 ratio, with specific compensation procedures and timelines to be announced in a subsequent update.
According to Onchain Lens monitoring, the UXLINK hacker swapped $10.54 million in DAI for 6,001 ETH at an average price of $1,757, and subsequently transferred the funds to Tornado Cash.
According to on-chain analyst Onchain Lens (@OnchainLens), the attacker behind the well-known MEV bot Jaredfromsubway laundered 2,000 ETH via Tornado Cash, worth approximately $3.44 million at current prices.
According to on-chain analyst PeckShield (@PeckShieldAlert), the well-known MEV bot “JaredFromSubway” has reportedly been attacked, resulting in the theft of approximately $7.5 million worth of crypto assets—including 1,474.58 WETH, 2.87 million USDC, and 2 million USDT. The attacker has exchanged the stolen funds for 4,400 ETH and transferred 1,000 ETH to the mixer Tornado Cash to obfuscate the fund’s trail.