入门 Ledger breach hacker sends 430.2 ETH to Tornado Cash while holding $70.6M in traceable assets
The hacker behind the Ledger breach moved 430.2 ETH to Tornado Cash on or before 2026-10-10, according to wublock123.com’s reporting. That transfer represents less than 1% of the attacker’s total known holdings — which remain at approximately $70.6 million in traceable, non-mixing addresses. The action does not signal full obfuscation; rather, it isolates a small portion of proceeds while leaving the majority exposed to chain analysis and potential regulatory intervention.
On or before 2026-10-10, an unidentified actor linked to the Ledger breach executed a single transaction sending exactly 430.2 ETH to Tornado Cash (Source: wublock123.com, 2026-10-10). This is not the first movement from the attacker’s wallet cluster, but it is the first confirmed use of a privacy mixer in this incident. The figure — 430.2 ETH — is precise and publicly verifiable on Ethereum’s mainnet. No other mixing activity tied to these addresses has been reported as of that date. The source does not specify whether the deposit was made via Tornado Cash’s v1 or v2 contracts, nor does it confirm if the funds have since been withdrawn.
The $70.6 million in remaining identifiable assets resides across multiple Ethereum and EVM-compatible chains, including balances in centralized exchange deposit addresses and DeFi protocol vaults. These holdings are not anonymized and remain subject to on-chain forensic tracking. For market participants, this means exchanges with KYC-compliant deposit histories may face intensified scrutiny if those addresses reappear in custody flows. For asset issuers, tokens held in the attacker’s wallets — such as stablecoins or governance tokens — carry elevated reputational and compliance risk. The presence of large, unmixed balances also increases the likelihood of future seizure coordination between blockchain intelligence firms and enforcement agencies.
This event tests the current limits of regulatory reach over mixed funds. Tornado Cash remains under U.S. OFAC sanctions, and its use triggers mandatory reporting obligations for U.S.-regulated entities. Yet the attacker retained the vast majority of stolen value outside mixers — suggesting either operational caution, technical limitation, or strategic delay. That asymmetry — minimal mixing versus maximal exposure — creates a measurable tension between evasion capability and real-world financial infrastructure constraints. It also highlights how asset liquidity, not just anonymity, dictates post-breach behavior: moving ETH into Tornado Cash does not equate to spendability, especially when counterparties screen for sanctioned mixer interactions.
Cryptocurrency investments involve substantial risk, including loss of principal. This article reports observed on-chain activity and third-party claims; it does not constitute financial, legal, or tax advice. Past performance is not indicative of future results. Cryptodlhub receives compensation for referrals to certain services, including through the /go/binance-download/ link. Binance is not affiliated with cryptodlhub. Official domain: binance.com. All data cited comes from wublock123.com’s report dated 2026-10-10. No figures have been estimated or extrapolated. For foundational concepts, see our Glossary and News sections.
Download the official Binance app
Risk warning and disclosure
Investing involves risk and market risk; official live rules always apply.
Related News
入门 CFTC clarifies swap definition: gambling excluded, prediction markets targeted
The CFTC issued an interpretive statement on October 10, 2026, distinguishing traditional gambling from regulated swaps — and signaling that certain predi…
入门 AguilaTrades’ Bitcoin short partially liquidated after $331K long loss
AguilaTrades’ Bitcoin short position faced partial liquidation on or before 2026-10-09, following a $331,000 loss from closing long positions. The event r…
入门 Bitdeer files SEC Form 6-K: $100M buyback and AI Cloud capacity correction
Bitdeer filed a Form 6-K on October 9, 2026, authorizing a $100 million share repurchase and revising its AI Cloud infrastructure plans—reducing total pla…
Follow the market on a major exchange
Download Binance or OKX from the official website to start trading.