Private Key Leak and Phishing Scam Lead to Combined Losses in Whale Crypto Hacks

Private Key Leak and Phishing Scam Lead to Combined Losses in Whale Crypto Hacks

A whale hacker amplifies the impact of previous breaches by withdrawing millions from Aave and routing stolen ETH through Tornado Cash.

ETH
DAI
AAVE

Summary

On Jan. 6, the hacker who stole $27.3 million from a whale's multisig wallet withdrew 1,000 ETH from Aave, routing 6,300 ETH through Tornado Cash. The thief also holds a $9.75 million leveraged position on Aave, backed by $20.5 million in ETH collateral, with a $10.7 million DAI loan.

Terms & Concepts
  • Tornado Cash: A decentralized privacy tool on Ethereum that mixes transactions to obscure their origin and destination.
  • Aave: A decentralized lending protocol allowing users to borrow and lend cryptocurrencies without intermediaries.