According to the source, Avalanche Treasury Co. announced a $675M business combination with Mountain Lake Acquisition Corp and stated a goal to accumulate over $1B of AVAX in its treasury, a development traders are watching for potential structural demand impacts on AVAX liquidity and spreads, source: Avalanche Treasury Co. and Mountain Lake Acquisition Corp. Sui Group launched native stablecoins suiUSDe and USDi in partnership with Ethena and the Sui Foundation, a move that can expand on-chain settlement and basis strategies across the Sui ecosystem, source: Sui Foundation and Ethena Labs. CME FedWatch shows a 99% probability of the policy rate being cut to 3.75%–4.00% at the October 29, 2025 meeting, sharpening rate-path visibility for crypto risk positioning, source: CME Group. The September ADP National Employment Report showed private payrolls fell by 32,000 versus expectations for a 50,000 gain, reinforcing the soft labor backdrop that aligns with easing expectations, source: ADP Research Institute. On-chain analyst ZachXBT reported $21M was drained from SBI Crypto–linked wallets and routed through Tornado Cash, highlighting elevated counterparty and compliance risks for centralized entities, source: ZachXBT. Abu Dhabi prohibited crypto mining on farmland and set fines of Dh100,000 with service disconnections for violations, adding regional operational constraints for miners, source: Abu Dhabi Agriculture and Food Safety Authority. Metaplanet acquired 5,268 additional BTC, bringing holdings to 30,823 BTC, extending the corporate bid narrative in spot markets, source: Metaplanet Inc. Aptos said it partnered with the Trump family’s World Liberty Financial to integrate the USD1 stablecoin, signaling potential on-chain payments and activity catalysts for APT, source: Aptos Labs and World Liberty Financial. Bloomberg’s Billionaires Index showed Elon Musk’s net worth reached $500B, a data point traders track for cross-asset risk sentiment alongside mega-cap tech flows, source: Bloomberg.

According to the source, on-chain analyst ZachXBT reported that approximately $21 million was drained from wallets linked to SBI Crypto and funneled into Tornado Cash. source: ZachXBT on X, Oct 1, 2025. SBI Crypto is part of SBI Holdings, which is listed on the Tokyo Stock Exchange under ticker 8473. source: SBI Holdings corporate profile and Tokyo Stock Exchange listing. The reported destination was Tornado Cash, an Ethereum mixer designated by the U.S. Treasury’s OFAC on Aug 8, 2022, and U.S. persons are generally prohibited from transacting with it. source: U.S. Treasury OFAC press release (Aug 8, 2022); ZachXBT on X, Oct 1, 2025.

According to @PeckShieldAlert, the UXLINK exploiter swapped 28.67 WBTC for roughly 778 ETH valued at about $3.27 million; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458. The exploiter has started depositing the acquired ETH into Tornado Cash; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458.

According to @PeckShieldAlert, the Resupply exploiter has deposited 1,607 ETH worth around 6.5 million dollars into Tornado Cash on September 29, 2025, source: @PeckShieldAlert. According to @PeckShieldAlert, the funds are linked to the June 2025 ResupplyFi exploit that caused a 9.6 million dollar loss, source: @PeckShieldAlert. Based on the on-chain alert from @PeckShieldAlert, traders can monitor Tornado Cash outflows and tagged ResupplyFi exploit addresses for potential ETH liquidity shifts across DEX venues, source: @PeckShieldAlert. Given the mixer inflow reported by @PeckShieldAlert, set alerts for fragmentation of the 1,607 ETH and subsequent swaps or bridges to assess short term flow risk around ETH pairs, source: @PeckShieldAlert.

According to @PeckShieldAlert, an abnormal withdrawal of approximately $3.6 million in crypto was detected from HyperVaultFi. According to @PeckShieldAlert, the funds were bridged from Hyperliquid to Ethereum, swapped into ETH, and 752 ETH was subsequently deposited into Tornado Cash. According to @PeckShieldAlert, the alert was tagged with Rugpull?, highlighting a high-risk on-chain event tied to HyperVaultFi’s addresses and flows.

According to @lookonchain, 5B GAIN were abnormally minted and part of the tokens were sold for 2,956 BNB (approximately $3M), triggering immediate on-chain risk flags for the token’s integrity (source: @lookonchain). The realized proceeds were bridged to Ethereum via deBridge, swapped for ETH, and then deposited into Tornado Cash, indicating rapid cross-chain movement and mixing of funds (source: @lookonchain). The source listed the involved addresses as 0x107E83EBE677DDec253C440127F23310720177c2, 0xB31BDDb3d1c2b45E5c5fE149Aa4c8304e9D1916C, 0xa6654f227EcCF2f84476d2d51434081613F8Baba, 0x1afc80d0E15cBCBfAAB9aD5520b4ab843Dfd648D, 0xf1755A2b7d0e418E9BAB4F81AD674fa39fA7F23D, 0xD4d83C2BC58B97d6458a7AE7d5b417c5422DC04C, and 0xF3d17326130F90c1900bc0B69323C4C7E2d58Db2 (source: @lookonchain). Given these flows reported by @lookonchain, traders can consider pausing exposure to GAIN, tracking liquidity pools and bridge endpoints tied to the above addresses, and closely monitoring BNB and ETH on-chain activity linked to this transfer path for further anomalies (source: @lookonchain). Alert time as posted by the source: Sep 25, 2025 (source: @lookonchain).

According to @PeckShieldAlert, the NGP token from NewGold Protocol was exploited for approximately $2 million. NGP dropped 88% within one hour, @PeckShieldAlert reported. The exploiter deposited 443.8 ETH of the stolen funds into Tornado Cash, @PeckShieldAlert reported. Traders should note the extreme price drawdown and the transfer route to Tornado Cash as reported by @PeckShieldAlert.

According to @EmberCN, the Radiant Capital hacker laundered 13,650 ETH (about $61.4M) through Tornado Cash a few days ago, then purchased 1,327 ETH at $4,521 using 6M DAI within the past 4 hours, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, the address currently holds $42.18M in assets: 27.4M DAI and 3,288 ETH valued at $14.78M, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, at the cited ETH price of $4,521, the 27.4M DAI equals roughly 6,060 ETH (27,400,000 divided by 4,521), providing a size reference for the wallet’s stablecoin holdings, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, this address executed three profitable ETH swing trades in August, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720.

According to @MistTrack_io, on Polygon the initial address 0x55d67b5e0e1c88f48c8a9d978ea76b9ec9d488a9 received 104.49 POL from ChangeNow, minted 120M OFTU, and bridged 30M OFTU to 30M YU on Solana address 87pS8qCum6qaSszbvoARBmFg1Mh1cqcE4ZTAsXfejBMz via LayerZero (source: @MistTrack_io). According to @MistTrack_io, on Solana the address 87pS8qCum6qaSszbvoARBmFg1Mh1cqcE4ZTAsXfejBMz received 0.82 SOL gas from ChangeNow, bridged 10M YU to EVM address 0x29F48B783EF90F81B51242D9a55e022A214274F5, sent 17.5M YU to 3pPbujCguJzhSakCYundcfjoaXC4JX1aHcDkAukR3J3h, swapped 2.5M YU for about 2.49M USDC, bridged 2.43M USDC to 0x29F48B783EF90F81B51242D9a55e022A214274F5, and also sent 50K USDC to ChangeNow plus 7,566 USDC to KuCoin (source: @MistTrack_io). According to @MistTrack_io, on EVM the address 0x29F48B783EF90F81B51242D9a55e022A214274F5 received 0.57 ETH gas from ChangeNow, swapped 5.213M YU to 5.213M USDC, sent 4.787M YU to the Yala Deployer, and aggregated 7.64M USDC to swap via Wintermute and UniswapX for 1,635.57 ETH (source: @MistTrack_io). According to @MistTrack_io, the ETH was dispersed to 161 wallets with roughly 10.1 ETH each and one wallet received 6 ETH that moved to SimpleSwap; 15 wallets have deposited ETH into Tornado Cash, while remaining ETH is idle across 146 wallets (source: @MistTrack_io).

According to @EmberCN, the Radiant Capital exploiter moved 5,933 ETH (about $26.7 million) through Tornado Cash within the past hour, source: @EmberCN. The address realized roughly $5.1 million in additional profit in August by completing three low-buy, high-sell ETH swing trades, source: @EmberCN. The exploiter previously converted approximately $53 million in stolen assets into ETH at around $2,420 last year, a position now valued at about $104 million, source: @EmberCN.

According to @OnchainLens, an ETH whale moved 47,507 ETH ($207.38M) into two new wallets after four years of inactivity, traced to address 0x67f706db3bbd04a250eed049386c5d09c4ee31f0, which is relevant for near-term ETH liquidity monitoring (source: Onchain Lens; data: Nansen). The whale previously received 123,687 ETH (~$19.04M at receipt) from Bitfinex, routed 2,901 ETH (~$1.67M) via Tornado Cash, and redeposited 20,000 ETH (~$39.4M) to Bitfinex, indicating measurable exchange inflows that traders track for potential order-book impact (source: Onchain Lens; data: Nansen). The wallet still holds 53,278 ETH (~$232.51M), leaving substantial supply off-exchange but with distribution risk if transfers continue, warranting watch on further flows (source: Onchain Lens; data: Nansen). Exchange inflows are historically associated with elevated short-term selling risk and can pressure price and funding if sustained, so monitoring Bitfinex netflows and any follow-on transfers from the cited address is prudent (source: CryptoQuant metrics guide; data: Nansen).

According to Lookonchain, whale address 0x67f7 transferred 47,507 ETH (about $207M) to two newly created wallets after four years of inactivity (source: Lookonchain; Arkham Intelligence). According to Lookonchain, the same address previously received 123,687 ETH from Bitfinex around six years ago when ETH was near $154, worth about $19.04M then and approximately $540M at current valuation as reported by Lookonchain (source: Lookonchain; Arkham Intelligence). According to Lookonchain, the wallet also deposited 2,900 ETH into Tornado Cash (source: Lookonchain; Arkham Intelligence). Traders tracking on-chain flows can reference these transfers to monitor subsequent movements from the new wallets and any mixer-linked outflows tied to 0x67f7 as flagged by the sources (source: Lookonchain; Arkham Intelligence).

According to @OnchainLens, on Sept 1, 2025 three wallets sold 8,961 ETH for 39.26 million DAI at an average execution price of 4,381 USD, based on on-chain data shared by @OnchainLens. According to @OnchainLens, the funds entering these wallets from Tornado Cash belong to a hacker.

According to @EmberCN, a hacker sold 8,960 ETH for 39.264 million DAI within roughly 50 minutes at an average price of 4,382 USD. According to @EmberCN, the ETH was withdrawn from Tornado Cash via three addresses before being swapped to DAI.

According to @1HowardWu, vilifying all crypto privacy technology because of Tornado Cash harms the ecosystem and the U.S. should pursue compliant privacy solutions instead of blanket prohibitions, positioning this as critical for American leadership in crypto (source: X post by @1HowardWu on Sep 1, 2025, https://twitter.com/1HowardWu/status/1962508745591882103). OFAC sanctioned Tornado Cash in August 2022 for facilitating laundering of more than $7 billion, including funds tied to the DPRK-linked Lazarus Group, prompting U.S. platforms to restrict interactions with the Ethereum (ETH) mixer and tighten compliance controls (source: U.S. Treasury OFAC press release JY0916, Aug 8, 2022, https://home.treasury.gov/news/press-releases/jy0916). Following the designation, mixer inflows declined while sanctioned actors sought alternative obfuscation methods, evidencing regulatory pressure on privacy tooling that influences on-chain liquidity routes traders rely on (source: Chainalysis analysis of mixer activity post-OFAC designation, 2023, https://blog.chainalysis.com/reports/tornado-cash-sanctions-mixers/). U.S. Treasury’s 2023 DeFi Illicit Finance Risk Assessment prioritizes closing AML/KYC gaps in DeFi and VASPs; traders should monitor policy moves shaping availability of compliant zero-knowledge and privacy solutions on U.S.-regulated venues that affect ETH DeFi flows and privacy-coin market access (source: U.S. Treasury, Illicit Finance Risk Assessment of Decentralized Finance, April 2023, https://home.treasury.gov/system/files/136/DeFi-Risk-Assessment.pdf; X post by @1HowardWu on Sep 1, 2025, https://twitter.com/1HowardWu/status/1962508745591882103).

According to @EmberCN, the Orbit Chain exploit wallet moved 4,320 ETH worth about 18.81 million USD through Tornado Cash after roughly one year of inactivity, following the 81.5 million USD theft in early 2024, source: @EmberCN on X, Aug 31, 2025. According to @EmberCN, the attacker converted most stolen funds into ETH at around 2,301 USD per ETH and ETH has approximately doubled since then, source: @EmberCN on X, Aug 31, 2025. According to @EmberCN, cumulative laundering via Tornado Cash has reached 17,242 ETH valued around 66.35 million USD, source: @EmberCN on X, Aug 31, 2025.

According to @OnchainLens, an address linked to the alleged Coinbase hacker (0x9b01b0545afe5b9957efc7945253e19b2ba07d9c) has received 5,514 ETH valued at approximately $24.04 million and has been withdrawing ETH through Tornado Cash. According to @OnchainLens, the withdrawals are occurring gradually rather than as a single bulk transfer, indicating ongoing mixer activity to disperse funds. According to the U.S. Treasury’s Office of Foreign Assets Control (OFAC), Tornado Cash is a sanctioned mixing service used to obfuscate transaction trails, elevating compliance and tracing risks around related flows. According to Chainalysis research, mixers are frequently used by illicit actors to launder proceeds on-chain, underscoring the relevance of monitoring mixer-linked outflows for market risk awareness.

According to @jchervinsky, the head of the DOJ Criminal Division said there will be no Section 1960(b)(1)(C) charges against developers who lack custody and control over user assets, while noting Roman Storm was just convicted on that exact charge and calling for the case to be dropped; source: https://twitter.com/jchervinsky/status/1958586731634335777 For traders, this headline centers regulatory risk around non-custodial DeFi tooling tied to Ethereum and privacy mixers, making ETH and privacy-related tokens sensitive to any DOJ clarification or case updates; source: https://twitter.com/jchervinsky/status/1958586731634335777

According to @PeckShieldAlert, the ResupplyFi exploiter laundered 2,280 ETH (roughly $9.8M) through Tornado Cash on August 12, 2025, confirming active movement of incident-related funds, source: @PeckShieldAlert. The alert does not report any exchange deposits, freezes, or recovery actions, indicating no containment was stated by the source at the time of the alert, source: @PeckShieldAlert. Traders can monitor the addresses and follow-up alerts referenced by the source to track further fund movements relevant to ETH market flows, source: @PeckShieldAlert.

According to @PeckShieldAlert, a ResupplyFi Exploiter 3–labeled address has transferred 1,000 ETH (about $4.3 million) to intermediate address 0x5f0b...E943 and has begun laundering the funds via Tornado Cash (source: @PeckShieldAlert, Aug 12, 2025). Traders can monitor the flagged intermediate address and related Tornado Cash outflows as near-term on-chain signals of exploiter distribution in this case (source: @PeckShieldAlert).