According to @OnchainLens, Richard Heart transferred 30,066 ETH (approximately $125.09 million) to a new wallet, with 29,804 ETH (approximately $124 million) routed via Tornado Cash, and cited the following addresses: 0x91E29CEA3CDe7866e679D19CC874d1196163230c, 0x1B5312E3E2ce21f65D0f1FB1785eCC0B392d1B1f, 0x0F92C105582b114145CD69d8a19eea5fB9A19749, and 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d (source: @OnchainLens on X, Oct 27, 2025). According to Tornado Cash documentation, the mixer obfuscates links between source and destination addresses, reducing traceability of subsequent ETH flows and complicating real-time sell-side monitoring (source: Tornado Cash documentation on GitHub). According to the U.S. Treasury OFAC press release dated Aug 8, 2022, Tornado Cash is under sanctions, implying centralized venues may apply stricter screening to related inflows, a factor traders consider when monitoring large transfers (source: U.S. Treasury OFAC press release, Aug 8, 2022). According to @OnchainLens, the disclosed addresses provide concrete points for on-chain tracking of any subsequent movements that could influence near-term ETH liquidity profiles (source: @OnchainLens on X, Oct 27, 2025).

According to @lookonchain, Richard Heart, founder of HEX, PulseChain, and PulseX, deposited 25,000 ETH approximately $102M into Tornado Cash within the past hour, based on on-chain monitoring, source: @lookonchain on X, Oct 26, 2025. Tornado Cash is designated by the U.S. Treasury’s OFAC, which increases compliance screening risk for related flows at exchanges and service providers, source: U.S. Department of the Treasury press release, Aug 8, 2022. Traders monitoring ETH can track subsequent wallet hops and any exchange inflows linked to this transfer to assess near-term liquidity and volatility, source: @lookonchain on X, Oct 26, 2025.

According to Onchain Lens, Richard Heart moved 11,558 ETH (about $46.91 million) into a new wallet at 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d and began transferring funds through Tornado Cash on Oct 26, 2025 (source: Onchain Lens on X; Arkham Intelligence address explorer for 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d). The use of Tornado Cash, a mixer designated by the U.S. Treasury’s OFAC for obscuring transaction origins, complicates downstream tracking and exchange-deposit detection for traders (source: U.S. Treasury/OFAC press release; Arkham Intelligence address explorer observations linked in the alert). Traders should monitor subsequent transfers from the 0x7eecF3...723d wallet and Tornado Cash-related flows to gauge potential changes in on-chain ETH supply using the Arkham Intelligence explorer referenced by the alert (source: Arkham Intelligence address explorer; Onchain Lens on X).

According to @ai_9684xtpa, an address allegedly tied to Richard Heart (HEX and PulseChain founder) moved 11,558 ETH to a new wallet roughly 15 minutes prior to the post and began batching transfers to Tornado Cash, following a 10,900 ETH deposit to Tornado Cash on Oct. 24 (source: @ai_9684xtpa, Oct 26, 2025). The receiving wallet 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d has already sent out 7,300 ETH valued at $29.56 million toward Tornado Cash, per the shared on-chain link (source: @ai_9684xtpa; Arkham Intel address 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d). The post notes these transfers tend to occur during market upswings, highlighting timing sensitivity for traders (source: @ai_9684xtpa). Tornado Cash is a mixer sanctioned by the U.S. Treasury for facilitating obfuscation of crypto flows, which complicates attribution of subsequent movements (source: U.S. Treasury/OFAC press release, Aug 8, 2022; Chainalysis 2023 Crypto Crime Report). For trading, monitor continued outflows from 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d and corresponding Tornado Cash inflows and set alerts to track whether mixed funds later appear at exchange-linked addresses via entity-tagged explorers (source: Arkham Intelligence explorer link provided by @ai_9684xtpa; Chainalysis analytics on mixer usage).

According to @ai_9684xtpa, a wallet the source attributes to Richard Heart, founder of HEX and PulseChain, transferred 115,580 ETH to a new address roughly 15 minutes before the report after previously routing 10,900 ETH to Tornado Cash on Oct 24, 2025. Source: @ai_9684xtpa on X, Oct 26, 2025. The receiving address 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d has already sent out 7,300 ETH in batches to Tornado Cash, worth about 29.56 million dollars at the time noted. Sources: @ai_9684xtpa on X and Arkham Intel address 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d. Based on the reported inflow and observed outflows, an estimated 108,280 ETH from this tranche could still be moved, which flow-focused traders may track intraday. Source: calculation from @ai_9684xtpa figures and Arkham Intel address activity. The source also observes these transfers have coincided with price upswings in prior instances and flags continued monitoring of further outflows. Source: @ai_9684xtpa on X. For real-time verification and tracking, monitor Arkham Intel address 0x7eecF3037B4b08f3f2198f6d59d5ca7eecaA723d. Source: Arkham Intel address page.

According to @PeckShieldAlert on X dated Oct 23, 2025, the Radiant Capital exploiter swapped about 16 million DAI for 4,345.6 ETH in two batches comprising 1,511 WETH and 2,834 ETH, providing a clear on-chain record of stablecoin-to-ETH conversion relevant for traders tracking ETH flows for risk management, source: @PeckShieldAlert on X, Oct 23, 2025. According to @PeckShieldAlert on X dated Oct 23, 2025, the same address subsequently deposited 2,834.6 ETH into Tornado Cash, a movement flagged by the source as an on-chain alert that traders can monitor for further flow analysis, source: @PeckShieldAlert on X, Oct 23, 2025.

According to @lookonchain, wallets suspected to be tied to Richard Heart transferred 153,241 ETH (about $608M) to new wallets over the past 5 hours. According to @lookonchain, these wallets previously accumulated 162,937 ETH (about $619M) across 25 wallets between Mar 4–8, 2024 at an average purchase price of $3,800. According to @lookonchain, the 153,241 ETH moved equals roughly 94% of the 162,937 ETH previously accumulated. According to @lookonchain, related wallets also deposited 9,500 ETH (about $37.43M) into Tornado Cash over the past six months.

According to @EmberCN, a cluster of addresses suspected to be tied to Hex, PulseChain, and PulseX founder @RichardHeartWin transferred 81,000 ETH worth about $323 million within the past 5 hours, highlighting significant on-chain activity that traders track for potential liquidity impacts, source: @EmberCN. According to @EmberCN, the same address cluster reportedly purchased 132,000 ETH on-chain in March 2023 using 499 million DAI at an average cost of $3,770 per ETH, source: @EmberCN. According to @EmberCN, aside from 9,500 ETH sent through Tornado Cash over the past six months, the remainder of these holdings had largely stayed in place until this recent movement, source: @EmberCN. According to @EmberCN, the 81,000 ETH was redistributed across multiple wallets listed in the report, underscoring a notable consolidation or redistribution pattern rather than a single destination, source: @EmberCN. Based on the reported $323 million valuation for 81,000 ETH, the transfers imply a contemporaneous reference price near $3,990 per ETH, a figure derived from the author’s data, source: @EmberCN. Based on those figures, selling the transferred tranche at the implied price would equate to roughly $220 per ETH in gross profit versus the reported $3,770 average entry, or about $17.8 million across 81,000 ETH, calculation based on data from @EmberCN. According to @EmberCN, the thread does not indicate deposits to centralized exchanges or DEX routers, so the on-chain intent remains unconfirmed from the provided evidence, source: @EmberCN.

According to @EmberCN, a suspected hacker repurchased 9,240 ETH for approximately $39.45M at $4,269 about five hours prior to the post, after selling 8,960 ETH at $4,382 on Sept 1 for 39.264M DAI; the round trip added 280 ETH in profit, roughly $1.18M at recent prices (source: @EmberCN on X; Arkham Intelligence address pages: https://intel.arkm.com/explorer/address/0x4FCcF87430FE87571FC50A605627b32D11Fc1086 https://intel.arkm.com/explorer/address/0x5c4d2Dd5286E0b9231dBF1ee1E6C8E489f38C6e7 https://intel.arkm.com/explorer/address/0xD240d6E834D65E92224ED794d66467bf6d1b84aF). The executed prices delineate an ETH on-chain activity band between $4,269 and $4,382 that traders can reference for near-term levels, as both prices and sizes are verified by the cited Arkham links and @EmberCN’s post (source: @EmberCN on X; Arkham Intelligence). The seller originally withdrew 8,960 ETH from Tornado Cash before selling, and later rotated DAI back into ETH on the buyback, indicating a net return of roughly 39.264M DAI flow into ETH on the latest leg (source: @EmberCN on X; Arkham Intelligence).

According to the source, Avalanche Treasury Co. announced a $675M business combination with Mountain Lake Acquisition Corp and stated a goal to accumulate over $1B of AVAX in its treasury, a development traders are watching for potential structural demand impacts on AVAX liquidity and spreads, source: Avalanche Treasury Co. and Mountain Lake Acquisition Corp. Sui Group launched native stablecoins suiUSDe and USDi in partnership with Ethena and the Sui Foundation, a move that can expand on-chain settlement and basis strategies across the Sui ecosystem, source: Sui Foundation and Ethena Labs. CME FedWatch shows a 99% probability of the policy rate being cut to 3.75%–4.00% at the October 29, 2025 meeting, sharpening rate-path visibility for crypto risk positioning, source: CME Group. The September ADP National Employment Report showed private payrolls fell by 32,000 versus expectations for a 50,000 gain, reinforcing the soft labor backdrop that aligns with easing expectations, source: ADP Research Institute. On-chain analyst ZachXBT reported $21M was drained from SBI Crypto–linked wallets and routed through Tornado Cash, highlighting elevated counterparty and compliance risks for centralized entities, source: ZachXBT. Abu Dhabi prohibited crypto mining on farmland and set fines of Dh100,000 with service disconnections for violations, adding regional operational constraints for miners, source: Abu Dhabi Agriculture and Food Safety Authority. Metaplanet acquired 5,268 additional BTC, bringing holdings to 30,823 BTC, extending the corporate bid narrative in spot markets, source: Metaplanet Inc. Aptos said it partnered with the Trump family’s World Liberty Financial to integrate the USD1 stablecoin, signaling potential on-chain payments and activity catalysts for APT, source: Aptos Labs and World Liberty Financial. Bloomberg’s Billionaires Index showed Elon Musk’s net worth reached $500B, a data point traders track for cross-asset risk sentiment alongside mega-cap tech flows, source: Bloomberg.

According to the source, on-chain analyst ZachXBT reported that approximately $21 million was drained from wallets linked to SBI Crypto and funneled into Tornado Cash. source: ZachXBT on X, Oct 1, 2025. SBI Crypto is part of SBI Holdings, which is listed on the Tokyo Stock Exchange under ticker 8473. source: SBI Holdings corporate profile and Tokyo Stock Exchange listing. The reported destination was Tornado Cash, an Ethereum mixer designated by the U.S. Treasury’s OFAC on Aug 8, 2022, and U.S. persons are generally prohibited from transacting with it. source: U.S. Treasury OFAC press release (Aug 8, 2022); ZachXBT on X, Oct 1, 2025.

According to @PeckShieldAlert, the UXLINK exploiter swapped 28.67 WBTC for roughly 778 ETH valued at about $3.27 million; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458. The exploiter has started depositing the acquired ETH into Tornado Cash; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458.

According to @PeckShieldAlert, the Resupply exploiter has deposited 1,607 ETH worth around 6.5 million dollars into Tornado Cash on September 29, 2025, source: @PeckShieldAlert. According to @PeckShieldAlert, the funds are linked to the June 2025 ResupplyFi exploit that caused a 9.6 million dollar loss, source: @PeckShieldAlert. Based on the on-chain alert from @PeckShieldAlert, traders can monitor Tornado Cash outflows and tagged ResupplyFi exploit addresses for potential ETH liquidity shifts across DEX venues, source: @PeckShieldAlert. Given the mixer inflow reported by @PeckShieldAlert, set alerts for fragmentation of the 1,607 ETH and subsequent swaps or bridges to assess short term flow risk around ETH pairs, source: @PeckShieldAlert.

According to @PeckShieldAlert, an abnormal withdrawal of approximately $3.6 million in crypto was detected from HyperVaultFi. According to @PeckShieldAlert, the funds were bridged from Hyperliquid to Ethereum, swapped into ETH, and 752 ETH was subsequently deposited into Tornado Cash. According to @PeckShieldAlert, the alert was tagged with Rugpull?, highlighting a high-risk on-chain event tied to HyperVaultFi’s addresses and flows.

According to @lookonchain, 5B GAIN were abnormally minted and part of the tokens were sold for 2,956 BNB (approximately $3M), triggering immediate on-chain risk flags for the token’s integrity (source: @lookonchain). The realized proceeds were bridged to Ethereum via deBridge, swapped for ETH, and then deposited into Tornado Cash, indicating rapid cross-chain movement and mixing of funds (source: @lookonchain). The source listed the involved addresses as 0x107E83EBE677DDec253C440127F23310720177c2, 0xB31BDDb3d1c2b45E5c5fE149Aa4c8304e9D1916C, 0xa6654f227EcCF2f84476d2d51434081613F8Baba, 0x1afc80d0E15cBCBfAAB9aD5520b4ab843Dfd648D, 0xf1755A2b7d0e418E9BAB4F81AD674fa39fA7F23D, 0xD4d83C2BC58B97d6458a7AE7d5b417c5422DC04C, and 0xF3d17326130F90c1900bc0B69323C4C7E2d58Db2 (source: @lookonchain). Given these flows reported by @lookonchain, traders can consider pausing exposure to GAIN, tracking liquidity pools and bridge endpoints tied to the above addresses, and closely monitoring BNB and ETH on-chain activity linked to this transfer path for further anomalies (source: @lookonchain). Alert time as posted by the source: Sep 25, 2025 (source: @lookonchain).

According to @PeckShieldAlert, the NGP token from NewGold Protocol was exploited for approximately $2 million. NGP dropped 88% within one hour, @PeckShieldAlert reported. The exploiter deposited 443.8 ETH of the stolen funds into Tornado Cash, @PeckShieldAlert reported. Traders should note the extreme price drawdown and the transfer route to Tornado Cash as reported by @PeckShieldAlert.

According to @EmberCN, the Radiant Capital hacker laundered 13,650 ETH (about $61.4M) through Tornado Cash a few days ago, then purchased 1,327 ETH at $4,521 using 6M DAI within the past 4 hours, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, the address currently holds $42.18M in assets: 27.4M DAI and 3,288 ETH valued at $14.78M, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, at the cited ETH price of $4,521, the 27.4M DAI equals roughly 6,060 ETH (27,400,000 divided by 4,521), providing a size reference for the wallet’s stablecoin holdings, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720. According to @EmberCN, this address executed three profitable ETH swing trades in August, source: @EmberCN on X Sep 17, 2025 https://x.com/EmberCN/status/1968288703564099720.

According to @MistTrack_io, on Polygon the initial address 0x55d67b5e0e1c88f48c8a9d978ea76b9ec9d488a9 received 104.49 POL from ChangeNow, minted 120M OFTU, and bridged 30M OFTU to 30M YU on Solana address 87pS8qCum6qaSszbvoARBmFg1Mh1cqcE4ZTAsXfejBMz via LayerZero (source: @MistTrack_io). According to @MistTrack_io, on Solana the address 87pS8qCum6qaSszbvoARBmFg1Mh1cqcE4ZTAsXfejBMz received 0.82 SOL gas from ChangeNow, bridged 10M YU to EVM address 0x29F48B783EF90F81B51242D9a55e022A214274F5, sent 17.5M YU to 3pPbujCguJzhSakCYundcfjoaXC4JX1aHcDkAukR3J3h, swapped 2.5M YU for about 2.49M USDC, bridged 2.43M USDC to 0x29F48B783EF90F81B51242D9a55e022A214274F5, and also sent 50K USDC to ChangeNow plus 7,566 USDC to KuCoin (source: @MistTrack_io). According to @MistTrack_io, on EVM the address 0x29F48B783EF90F81B51242D9a55e022A214274F5 received 0.57 ETH gas from ChangeNow, swapped 5.213M YU to 5.213M USDC, sent 4.787M YU to the Yala Deployer, and aggregated 7.64M USDC to swap via Wintermute and UniswapX for 1,635.57 ETH (source: @MistTrack_io). According to @MistTrack_io, the ETH was dispersed to 161 wallets with roughly 10.1 ETH each and one wallet received 6 ETH that moved to SimpleSwap; 15 wallets have deposited ETH into Tornado Cash, while remaining ETH is idle across 146 wallets (source: @MistTrack_io).

According to @EmberCN, the Radiant Capital exploiter moved 5,933 ETH (about $26.7 million) through Tornado Cash within the past hour, source: @EmberCN. The address realized roughly $5.1 million in additional profit in August by completing three low-buy, high-sell ETH swing trades, source: @EmberCN. The exploiter previously converted approximately $53 million in stolen assets into ETH at around $2,420 last year, a position now valued at about $104 million, source: @EmberCN.

According to @OnchainLens, an ETH whale moved 47,507 ETH ($207.38M) into two new wallets after four years of inactivity, traced to address 0x67f706db3bbd04a250eed049386c5d09c4ee31f0, which is relevant for near-term ETH liquidity monitoring (source: Onchain Lens; data: Nansen). The whale previously received 123,687 ETH (~$19.04M at receipt) from Bitfinex, routed 2,901 ETH (~$1.67M) via Tornado Cash, and redeposited 20,000 ETH (~$39.4M) to Bitfinex, indicating measurable exchange inflows that traders track for potential order-book impact (source: Onchain Lens; data: Nansen). The wallet still holds 53,278 ETH (~$232.51M), leaving substantial supply off-exchange but with distribution risk if transfers continue, warranting watch on further flows (source: Onchain Lens; data: Nansen). Exchange inflows are historically associated with elevated short-term selling risk and can pressure price and funding if sustained, so monitoring Bitfinex netflows and any follow-on transfers from the cited address is prudent (source: CryptoQuant metrics guide; data: Nansen).