Lookonchain reports the Pando Rings hacker purchased 7,548 ETH for $16.72 million and deposited 4,000 ETH worth $9.17 million into TornadoCash to launder proceeds while focus remained on the Binance incident.

PeckShieldAlert reports the PandoRings exploiter supplied 16.8M USDT to Aave, borrowed and repaid 5K ETH, then swapped 16.7M DAI for 7,548 ETH before depositing 4K ETH into TornadoCash on October 30.

PeckShieldAlert reports the X100 exploiter address deposited 821.2 ETH worth 1.89 million dollars into TornadoCash after the project lost 4.75 million dollars in a flash-loan governance attack on October 24.

Lookonchain reports the Drift Protocol exploiter deposited 25,700 ETH worth $61.56M into TornadoCash after two months of inactivity while retaining 81,864 ETH valued at $195M.

Notional Finance escrow contract exploited for $1.7M in DAI and USDC, swapped to 689.2 ETH and sent to TornadoCash per PeckShieldAlert.

VerusCoin Ethereum Bridge exploited for $7.5M with funds laundered via TornadoCash as ETH holds $1925 amid neutral RSI and MACD death cross.

Ostium lost 23.75M USDC; funds swapped for 12084 ETH at $1966 average then sent to TornadoCash.

Hinkal Protocol exploited for $820K as attacker launders 410 ETH through TornadoCash and Thorchain, with ETH trading at $1702 amid bullish EMA structure.

KyberSwap exploiter transfers 2K ETH to TornadoCash, bringing total laundered to 16,100 ETH worth $40M from the 2023 $48.8M theft.

According to PeckShieldAlert, the LML token experienced a catastrophic exploit resulting in losses of approximately $950,000. The hacker converted 950,000 USDT into 450.6 ETH before hiding the funds through TornadoCash. This incident caused the LML token to drop by a staggering 99.6% in value, raising serious concerns for traders and investors in the token.

According to PeckShieldAlert, the Venus Protocol's $THE market has been exploited, resulting in approximately $2.15 million in bad debt. The attacker withdrew 7,400 ETH from TornadoCash a month ago and borrowed $9.9 million to purchase $THE. They artificially inflated the exchange rate by donating 36.1 million $THE to the vTHE contract, bypassing the supply cap. Post-attack, Justin Sun, a top $XVS holder, deposited 621K $XVS ($1.95M) on HTX Global, while the BNB Bridge Exploiter, another major $XVS holder, still retains 135K $XVS (~$421K).

According to PeckShieldAlert, the attacker who exploited $24 million worth of aEthUSDC from @sillytuna has conducted several transactions to obscure the trail. The perpetrator swapped approximately $2 million worth of DAI and ETH for 6,174.4 XMR, now held on Hyperliquid. Additionally, around $6.5 million in USDC and USDT was deposited into centralized exchanges like OKX, MEXC, and Bitkan, while 375 ETH was laundered via TornadoCash.

According to Lookonchain, the Infini Exploiter has recently spent 13.32 million DAI to purchase 6,316 ETH at $2,109 per ETH. Following this transaction, all 15,470 ETH, worth approximately $32.6 million, were sent to TornadoCash. The exploiter has demonstrated a pattern of strategic trading, including significant ETH acquisitions and high-value sales in the past, often utilizing TornadoCash for fund obfuscation.

According to @PeckShieldAlert, Truebit Protocol has been exploited for approximately $26.5 million and the attacker transferred 8,500 ETH to addresses 0x2735...cE850a and 0xD12f...031a60; source: @PeckShieldAlert. TRU has dropped 100% following the incident, highlighting severe price impact for the token; source: @PeckShieldAlert. The same exploiter previously attacked Sparkle around 12 days earlier, obtaining 5 ETH and depositing it into TornadoCash; source: @PeckShieldAlert. The alert was posted on Jan 9, 2026, providing near real-time on-chain incident context for traders; source: @PeckShieldAlert.