It looks like the Harmony attacker is moving the stolen crypto to Tornado Cash. According to Etherscan, the wallet used in last week’s attack transferred a little over 18,036 ETH worth about $21 million to a backup wallet.
The money was then divided equally among three secondary wallets; at the time of writing, two of these secondary wallets had already delivered ETH to a Tornado Cash router.
This is significant because last week Harmony’s Horizon bridge was used to steal over $100 million in different tokens, including FRAX, FXS, ETH, BTC, AAVE, SUSHI, USDT, and BUSD. All of these were exchanged for ETH, so it’s possible that the attacker is trying to cash out their ill-gotten gains using Tornado Cash.
The amount of ETH being transferred using Tornado Cash has reached 10,409 ETH, or more than $12 million. This privacy-enabling protocol is becoming increasingly popular, with approximately one new 100 ETH transaction occurring every six minutes.