Tornado Cash

Tornado

Over half of the $100 million worth of Ether&nbsp;<a href="https://cointelegraph.com/news/poloniex-exchange-hack-60-million-drained-5-percent-bounty">linked to the infamous Poloniex hack</a> from November 2023 has been siphoned via the privacy protocol Tornado Cash.
On Nov. 10, 2023, wallets belonging to crypto exchange Poloniex recorded massive unauthorized outflows. Investigations later confirmed that over $100 million worth of Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>)&nbsp;was lost to a hack.
Despite Poloniex <a href="https://cointelegraph.com/news/poloniex-hacker-identity-confirmed-10-million-bounty">claiming to have identified the hacker</a> weeks later and offering a $10 million bounty, the stolen funds never made it back to the exchange. According to the blockchain security firm CertiK, the incident was likely a “private key compromise.”
In response to the suspicious outflows, the exchange had temporarily disabled the compromised wallet.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/433c8bf3-0f9f-45ef-ab91-8f6370148853.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 On-chain message from Poloniex to the hacker. Source: PeckShield
 </figcaption>
</figure>
Six months later, it became evident that the Poloniex hacker had no intention of returning the stolen funds. Blockchain investigation firm PeckShield found that more than half of the loot was siphoned across Tornado Cash, a protocol used to anonymize assets.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-05/4236e509-dba4-4180-b983-b6cf3a07db04.jpeg" alt="" title="">
 <figcaption style="text-align: center;">
 Poloniex hacker transferring stolen funds to Tornado Cash wallet. Source: PeckShield
 </figcaption>
</figure>
The hacker moved over 17,800 ETH from six different wallets into a single Tornado Cash address, as shown in the flowchart above. At the time of transfer, the tokens were worth approximately $53.3 million. 
Related: <a href="https://cointelegraph.com/news/pike-finance-exploited-1-6-million-second-exploit-3-days">Pike Finance exploited for $1.6M in second incident in 3 days</a>
Poloniex resumed operations shortly despite the $100 million setback, enabling investors to deposit and withdraw crypto at will.
The exchange appointed a “top-tier security auditing firm” to enhance the security of funds on Poloniex and avoid such hacks in the future. At the time. The company had said:
<blockquote data-ct-non-breakable="true">
 “Currently, they are in the final stages of the security audit and verification processes for Poloniex. Upon completion of the audit, we will promptly resume deposit and withdrawal services on our platform.”
</blockquote>
Poloniex owner Justin Sun — who <a href="https://cointelegraph.com/news/tron-founder-justin-sun-admits-investment-in-crypto-exchange-poloniex">acquired the exchange in 2019</a> — had promised to fully reimburse the users affected by the breach, claiming that Poloniex “maintains a healthy financial position” and is looking for collaborations with other exchanges to recover the lost funds.
Magazine: <a href="https://cointelegraph.com/magazine/crypto-market-makers-legit-dodgy-fake-it/">What do crypto market makers actually do? Liquidity, or manipulation</a>

Stolen Poloniex Ether worth $53M never made it back to the exchange

Cointelegraph

Outros artigos publicados em 14 de mai. de 2024

AI Coins Mirror Surge On Nvidia; Analysts Suggest Milei Moneda ($MEDA) Has Potential For Major Gains

Beyond Currency: Why Bitcoin Is the Greatest Store of Value in a Decentralized Financial Future

Infinix NOTE 40 vs Redmi Note 13 vs Realme 11: which smartphone reigns supreme?

Crypto Whales Are Ready for the Bull Run and Are Accumulating These Cryptos

Biden Ordered Divestment of Mining Facility Near US Missile Base

Sullivan & Cromwell Denies Complicity in FTX Fraud, Seeks Lawsuit Dismissal

Receba nossa newsletter para saber diariamente as novidades das criptomoedas!