PeckShieldAlert reports the Aztec Exploiter labeled address deposited 1255.8 ETH worth roughly $3M into Tornado Cash on October 20, 2026.

Cronos erased two hours of transactions to reverse a $111 million DeFi exploit, with CRO holding at $0.06 amid bullish EMA alignment.

Notional Finance escrow contract exploited for $1.7M in DAI and USDC, swapped to 689.2 ETH and sent to TornadoCash per PeckShieldAlert.

BSquaredNetwork exploited for 8.59M B2 ($3.86M); attacker sold for 5,409 BNB then bridged to Ethereum and NEAR Intents.

ThetanutsFi exploited for $2.1M as $2M option tokens whitehatted; exploiter swapped $105K USDC for ~60 ETH amid ETH price at $1816.3.

TrustedVolumes DeFi platform loses $6.7M in exploit, exposing crypto security vulnerabilities amid rising DeFi exploit history in 2026.

KyberSwap hacker moves 2,900 ETH worth $6.8M to Tornado Cash, echoing 2023's $47M reentrancy exploit amid bearish ETH price trends.

KelpDAO suffers $292M DeFi exploit, raising questions on sector future amid ETH price volatility at $2324.47 and bearish MACD signals.

KelpDAO suffers $294M exploit as attacker mints 116,500 RSETH, borrows 106,467 ETH amid DeFi security risks and crypto market volatility.

KelpDAO exploiter deposits stolen rsETH into AaveV3, CompoundV3, Euler, borrowing over $236M in WETH amid DeFi exploit details and crypto market volatility.

According to @OnchainLens, a victim lost $50M in USDT in an address poisoning attack (source: @OnchainLens). @OnchainLens reports the attacker swapped the stolen USDT for DAI, moved funds to another wallet, then swapped for ETH before routing the proceeds through Tornado Cash (source: @OnchainLens). The victim wallet 0xcb80784ef74c98a89b6ab8d96ebe890859600819 and thief wallets 0xbaff2f13638c04b10f8119760b2d2ae86b08f8b5 and 0x9da061291e11dad806d68c20730c516c34a17b9b are identified by @OnchainLens and can be verified on Etherscan transaction records (sources: @OnchainLens, Etherscan). Traders can monitor these addresses on Etherscan to track any further swaps or transfers that could affect USDT, DAI, and ETH on-chain liquidity as flagged by @OnchainLens (sources: Etherscan, @OnchainLens).

According to @EmberCN, the address linked to the Balancer exploit swapped ETH LST tokens and other non-ETH assets into ETH, then deposited 2,000 ETH (about $6.36 million) into Tornado Cash within the past hour; this activity is visible on-chain. source: x.com/EmberCN/status/1989550291327525232, source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5 On-chain records for 0x0e9c9473d0c504da72763426719f6f03a15544d5 show multiple deposits to Tornado Cash contracts totaling 2,000 ETH in a one-hour window, indicating active obfuscation of funds. source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5 @EmberCN adds that moving the stolen ETH through Tornado Cash likely signals the actor is not pursuing a white-hat bounty pathway that would involve returning funds. source: x.com/EmberCN/status/1989550291327525232 For traders, Tornado Cash usage aligns with patterns seen in crypto hacks where mixers are used to launder stolen assets, complicating tracing and recovery; this typically heightens risk perception for related tokens and pools. source: home.treasury.gov/news/press-releases/jy0916, source: blog.chainalysis.com/reports/crypto-crime-mid-year-update-2022-mixers Monitor BAL, Balancer-related pools, and further outflows from the flagged address for potential liquidity shifts and on-chain sell pressure signals tied to the exploit. source: x.com/EmberCN/status/1989550291327525232, source: etherscan.io/address/0x0e9c9473d0c504da72763426719f6f03a15544d5