{"id":580592,"date":"2023-01-19T15:15:00","date_gmt":"2023-01-19T15:15:00","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=580592"},"modified":"2023-01-19T14:11:15","modified_gmt":"2023-01-19T14:11:15","slug":"raydium-attacker-stolen-eth-tornado-cash","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/raydium-attacker-stolen-eth-tornado-cash\/","title":{"rendered":"Raydium Attacker Moves $2.7 Million Stolen ETH To Tornado Cash"},"content":{"rendered":"\n<p>Summary: <\/p>\n\n\n\n<ul><li>The Raydium exploiter drained a total of $4.4 million in digital assets from the Solana DEX in December 2022 before moving the funds to Ethereum&#8217;s blockchain.<\/li><li>A wallet controlled by the hack transferred $2.7 million of the stolen loot to sanctioned crypto mixer Tornado Cash on Thursday.<\/li><li>The incident was one of several attacks on the decentralized finance ecosystem throughout last year.\u00a0<\/li><\/ul>\n\n\n\n<p>A hacker who stole almost $5 million from Solana-native decentralized exchange Raydium moved a part of the funds from an Ethereum wallet to sanction crypto mixing protocol Tornado Cash.&nbsp;<\/p>\n\n\n\n<p>The activity was noted on Thursday by the on-chain security firm CertiK. According to the company, the exploiter transferred $2.7 million in stolen Ether (ETH) to the mixer. EtherScan data indicated that the hacker\u2019s wallet moved a total of 1,774.5 ETH over 42 transactions.\u00a0<\/p>\n\n\n\n<figure class=\"wp-block-embed aligncenter is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/CertiKSkynetAlert?src=hash&amp;ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">#CertiKSkynetAlert<\/a> \ud83d\udea8<br><br>We are seeing ~1,774.5 ETH (~$2.7M) being deposited into <a href=\"https:\/\/twitter.com\/TornadoCash?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">@TornadoCash<\/a> from the Raydium exploiter 0xb98ac as labeled on <a href=\"https:\/\/t.co\/lb2v6r8c4s\" rel=\"nofollow\">https:\/\/t.co\/lb2v6r8c4s<\/a>.<br><br>Stay vigilant! <a href=\"https:\/\/t.co\/JVqWAw9MVO\" rel=\"nofollow\">pic.twitter.com\/JVqWAw9MVO<\/a><\/p>&mdash; CertiK Alert (@CertiKAlert) <a href=\"https:\/\/twitter.com\/CertiKAlert\/status\/1615977628627787776?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">January 19, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>The initial hack <a href=\"https:\/\/en.ethereumworldnews.com\/raydium-hacker-bridges-solana-to-ethereum\/\">occurred<\/a> in December 2022 as previously reported. An unidentified exploiter obtained keys to the admin account for Raydium\u2019s smart contract code. The compromised credentials allowed the hacker to drain liquidity pool (LP) tokens from the DEX. After, the individual bridged the digital assets to Ethereum\u2019s blockchain and converted the funds to ETH.&nbsp;<\/p>\n\n\n\n<p>A total of $4.4 million in crypto was stolen off the Solana-based exchange, per reports.\u00a0<\/p>\n\n\n\n<h2>Tornado Cash Saga<\/h2>\n\n\n\n<p>The attempt to leverage Tornado Cash and other crypto mixers is not uncommon among decentralized finance (DeFi) criminals. Indeed, the U.S Treasury Department sanction the Ethereum-based protocol on suspicions that North Korean cyber-criminal organizations used the service to fund illicit operations.<\/p>\n\n\n\n<p>Although, reports from on-chain observers like Chainalysis disputed claims that the bulk of global money laundering and illicit wealth is funneled through the crypto industry. Per the blockchain company\u2019s review, crypto makes up for less than 5% of illegal cash flow.<\/p>\n\n\n\n<p>Alexey Pertsev who wrote the code for Tornado Cash was <a href=\"https:\/\/en.ethereumworldnews.com\/tornado-cash-developer-alexey-pertsev-will-reportedly-stay-in-jail-for-two-months-after-his-appeal-gets-dismissed-by-the-court\/\">arrested<\/a> by Dutch police back in August 2022. Pertsev remains jailed until February 20 as a Netherlands judge deemed the developer a flight risk.&nbsp;<\/p>\n\n\n\n<h2>Raydium Hack Among Over $3 Billion In DeFi Attacks <\/h2>\n\n\n\n<p>Raydium counted among a raft of attacks on DeFi protocols in 2022. Hackers had drained over $1 billion in assets from crypto projects as of September. October was <a href=\"https:\/\/www.forbes.com\/sites\/ninabambysheva\/2022\/12\/28\/over-3-billion-stolen-in-crypto-heists-here-are-the-eight-biggest\/\" rel=\"noopener\">tagged<\/a> the worst month for DeFi hacks.<\/p>\n\n\n\n<p>To date, the 2022 exploit of Ronin\u2019s bridge remains the largest hack in DeFi history. The exploit which was attributed to the North Korean group Lazarus <a href=\"https:\/\/en.ethereumworldnews.com\/ronin-network-hacked-for-173-6k-ethereum-and-25-5m-usdc\/\">stole<\/a> over $600 million in Ethereum and USDC from the cross-chain service.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary: The Raydium exploiter drained a total of $4.4 million in digital assets from the Solana DEX in December 2022 before moving the funds to Ethereum&#8217;s blockchain. A wallet controlled by the hack transferred $2.7 million of the stolen loot to sanctioned crypto mixer Tornado Cash on Thursday. The incident was one of several attacks on the decentralized finance ecosystem throughout last year.\u00a0 A hacker who stole almost $5 million from Solana-native decentralized exchange Raydium moved a part of the [&hellip;]<\/p>\n","protected":false},"author":55,"featured_media":580595,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[108120,823,2],"tags":[108495,108793,108437],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/580592"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=580592"}],"version-history":[{"count":2,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/580592\/revisions"}],"predecessor-version":[{"id":580596,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/580592\/revisions\/580596"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/580595"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=580592"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=580592"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=580592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}