The attacker of the Ledger incident has transferred 2,990 ETH into Tornado Cash

On-chain detective Specter posted on their personal channel that between October 9 and 10, the attacker addresses related to the CryptoBilis Ledger hardware wallet incident deposited 2990.3 ETH into Tornado Cash, worth approximately 7.45 million USD.

Monitoring shows that the attacker previously withdrew funds to 14 addresses, then cross-chained to ZEC via NEAR Intents and processed for privacy. Specter stated that the attacker partially reused previous deposit addresses to submit withdrawal transactions, and some withdrawal transactions were initiated by wallets associated with the addresses that paid Gas fees during the theft, thereby linking the funds to the withdrawal actions.

Currently, the attacker continues to transfer and hide the related funds. The previous CryptoBilis incident involved supply chain risks of the Ledger hardware wallet, and Ledger has stated that they are investigating and reminding relevant users to pay attention to device security.