Hacker hijacks multi-signature wallet, launders tens of millions of USD through Tornado Cash

According to blockchain security company PeckShieldAlert, a hacker has successfully compromised and taken control of a multi-signature wallet, causing an estimated loss of approximately $27.3 million. After the attack, the attacker withdrew 1,000 ETH, equivalent to about $3.24 million, from the decentralized lending protocol Aave. To conceal the flow of funds, the stolen assets were transferred through Tornado Cash, a privacy-focused centralized transaction mixing service.

On-chain data shows that the hacker has sent a total of 6,300 ETH, worth approximately $19.4 million, to Tornado Cash so far. Additionally, the attacker is holding leveraged long positions with a total value of around $9.75 million, including $20.5 million in ETH and $10.7 million in DAI, indicating a high level of risk amid close monitoring by the blockchain security community.