Security Agency: Aztec Connect attackers deposited 1,255.8 ETH into Tornado Cash

According to monitoring by the blockchain security agency Salus, the Aztec Connect attacker made 30 transactions on October 19, depositing 1,255.8 ETH (approximately 3.01 million USD) into Tornado Cash. The batches consisted of 12 transactions of 100 ETH, 5 transactions of 10 ETH, 5 transactions of 1 ETH, and 8 transactions of 0.1 ETH.

On June 14, the attacker exploited a settlement verification vulnerability in the deprecated Aztec Connect contract to steal approximately 2.19 million USD in assets, including 908.987 ETH as well as DAI, wstETH, and Yearn vault tokens. After holding the funds for about four months, the attacker redeemed the vault tokens on October 19, converting the token assets into an additional 346.767 ETH. The balances of the 6 stolen ERC-20 tokens have all been reduced to zero.