Drift Protocol exploiter deposits 23,095 ETH worth $44.4M into TornadoCash while retaining 107,165 ETH valued at $201M at $1880 ETH price levels.

Drift Protocol hack sees 5800 ETH ($11.14M) moved to Tornado Cash after swap to 129066 ETH at $2154 average on Ethereum.

Drift Protocol exploiter deposits 100 ETH batches into Tornado Cash after 3 months dormant on Solana, tracked by Arkham.

Summer Fi exploiter routes 6.017M DAI through Tornado Cash, retaining 294.2 ETH worth $565K across two wallets at current ETH price levels.

Ostium public OLP vault loses $24M USDC to exploiter who converts to 12.08K ETH and sends 10,540 ETH to TornadoCash from Bybit-funded wallet.

Summer.fi exploiter splits 6.017M DAI into ETH swaps, sending 40 ETH to TornadoCash through intermediary wallet.

ETH whale acquires 12128 ETH at $1760.55 via Cowswap from Solana USDC then routes funds to Tornado Cash, with 4h chart showing bullish EMA structure at $1784.97.

JaredFromSubway MEV exploiter shifted 2000 ETH ($3.44M) through Tornado Cash, sold 1422 ETH for $2.446M DAI and holds just 5 ETH remaining.

UXLINK exploiter spends 6.5M DAI for 3,686 ETH at $1,764 average, routing proceeds through Tornado Cash amid ongoing laundering.

KyberSwap hacker moves 2,900 ETH worth $6.8M to Tornado Cash, echoing 2023's $47M reentrancy exploit amid bearish ETH price trends.

Balancer attacker's address moves 5609 ETH worth $13M to THORChain amid Lazarus Group links, highlighting ETH laundering methods via Tornado Cash.

Balancer Exploiter transfers 100 ETH ($233K) to new wallet, uses Tornado Cash; holds 21,900 ETH ($51.13M) amid ETH price prediction volatility.

Venus Protocol attacker moves 2,301 ETH worth $5.32M to Tornado Cash, with $17.45M remaining; Kelp DAO exploiter shifts over 31K ETH amid crypto exploit funds movement.

According to @ai_9684xtpa, the attacker behind the Venus flash loan exploit has transferred 1,743 ETH, valued at $3.78 million, to the address 0x7a79969a0B9D51D922C4810D2950560360F6f234. Interestingly, this address has been accumulating ETH from Tornado Cash over the past 10 months and now holds 7,450 ETH worth $16.11 million, which is currently being managed in Aave. Venus has faced recurring attacks since 2021, leading to cumulative losses exceeding $260 million.

According to Lookonchain, an attacker transferred 7,400 ETH from Tornado Cash, using the funds as collateral on Aave to borrow approximately $9.92 million in stablecoins. This movement highlights ongoing security challenges in DeFi platforms and could impact trading sentiment around Ethereum (ETH).

According to @EmberCN, an address that received 7,400 ETH from Tornado Cash initiated a liquidation event involving CAKE and THE tokens. This caused a $2.15 million deficit for Venus Protocol, while the hacker extracted approximately $5.07 million worth of assets, including 2,172 BNB, 1.516 million CAKE, and 20 BTC.

According to @EmberCN, a hacker who stole 49.5 million USDC from Infini in February last year has demonstrated advanced trading skills. The hacker converted stolen USDC to ETH, sold ETH for DAI at an average price of $3,762 in August, and recently bought back ETH with DAI at $2,109 per ETH. The hacker then laundered 15,470 ETH, worth approximately $32.58 million, through Tornado Cash.

According to PeckShieldAlert, exploiter-labeled addresses tied to the Aperture Finance incident have deposited 1,242.7 ETH (around $2.4M) into Tornado Cash, and the project previously suffered an exploit on January 25, 2026 that impacted its V3/V4 contracts with an estimated loss of about $3.67M. According to PeckShieldAlert, these on-chain transfers indicate continued movement of stolen ETH through a mixer following the exploit, a key datapoint for traders tracking DeFi smart contract risk and potential contagion within Ethereum liquidity.

According to PeckShieldAlert, the Truebitprotocol exploiter deposited 8.5K ETH worth about $26.5 million into Tornado Cash, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, the attacker routed the stolen 8.5K ETH to two addresses 0x2735...cE850a and 0xD12f...031a60 prior to mixing, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, TRU collapsed by 100% following the exploit, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, the same exploiter also attacked Sparkle about 12 days earlier, stealing 5 ETH and sending it into Tornado Cash, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049.

According to @lookonchain, the Truebit hacker deposited all 8,535 ETH (about $26.44M) into Tornado Cash and laundered the funds following the exploit, as reported in an X post on Jan 11, 2026, source: Lookonchain on X. Arkham Intelligence’s Truebit hacker entity traces these inflows to Tornado Cash pools, corroborating the laundering route, source: Arkham Intelligence intel.arkm.com explorer. The initial theft and 8,535 ETH transfer are recorded on Etherscan under transaction hash 0xcd4755645595094a8ab984d0db7e3b4aabde72a5c87c4f176a030629c47fb014, confirming the amount and movement, source: Etherscan transaction record. For trading context, illicit funds frequently pass through mixers before reaching exchanges, making subsequent Tornado Cash outflows a key on-chain signal for potential liquidity movements, source: Chainalysis Crypto Crime Report 2023.