Tornado Cash
Named by 24 kept items in this workspace.
16 items name it under tools, 5 under classification.technologies and 3 under classification.key entities.
Search every workspace for Tornado Cash. It matches the name as written, so it can find other things that share it.
The items that name it 24
Crypto mixer that funded the operational wallet which submitted the attacker's signed EIP-7702 authorizations, per Chainalysis.
Crypto mixer used to fund the attacker's operational wallet, per TRM and Chainalysis
Mixer used by the attacker for small withdrawals during preparation, traced back at least 36 hours by TRM
Mixer used to fund the attacker's operational wallet on Ethereum before the Binance theft.
Mixer whose small withdrawals funded the attackers' operator wallet.
Mixer that appears so far only as funding for the address that set up the attack
Mixer that scrambles the trail of crypto payments; an address funded through it submitted the EIP-7702 delegation.
coin mixer; thief pushed 2,810 ETH through it in three runs, per YFarmX
cryptocurrency mixing service used to launder stolen funds
Used by the attacker to launder the stolen funds, sent in 10-ETH lots.
Crypto mixer; funded the suspicious address (0.1 ETH) that received the diverted MetaMask validator block rewards.
Mixer used to route 18 of 19 block reward payments from affected MetaMask validators to an attacker-controlled address (per independent onchain analysis by researcher Kaden), amounting to roughly 0.36 ETH (under $1,000).
Mixer used to fund attacker wallets (1 ETH from the 1-ETH pool, address 0x47CE0C6e…2936) to obscure origin
- Weekly Research Brief: Binance Hacked; Hyperliquid on Wall Street; Prediction Markets’ Brazil ‘Miss’
Named as a possible route for laundering the roughly $2.4b in ETH and BTC still held by the attacker.
Mixer that received 20 deposits totaling 1,370 ETH from wallets associated with the consolidation address
Used by the attacker to fund gas (0.1 ETH pool withdrawal at 08:26:59 UTC on 23 October) and later for a 100 ETH deposit by the recipient address
All technologies in this workspace.