Home/Research library/Market research

Article / PANews

Security firm: Aztec Connect attacker deposited 1,255.8 ETH into Tornado Cash

PANews October 20 news, according to monitoring by blockchain security firm Salus, the Aztec Connect attacker deposited 1,255.8 ETH (about $3.01 million) into Tornado Cash on October 19 across 30 transactions. The batches were 12 transactions of 100 ETH, 5 transactions of 10 ETH, 5 transactions of 1 ETH, and 8 transactions of 0.1 ETH. On June 14, the attacker exploited a settlement verification vulnerability in the deprecated Aztec Connect contract to steal about $2.19 million in assets, including 908.987 ETH as well as DAI, wstETH, and Yearn vault tokens. After holding the funds for about four months, the attacker redeemed the vault tokens on October 19 and swapped the token assets for another 346.767 ETH. Currently, the balances of all six stolen ERC-20 tokens have been fully zeroed out.

Related reading