The Ledger incident continues to escalate: attackers have transferred $7.45 million in ETH to Tornado Cash.

PANews October 11 news: According to on-chain detective Specter on their personal channel, the attacker address related to the CryptoBilis Ledger hardware wallet incident deposited 2,990.3 ETH, worth approximately $7.45 million, into Tornado Cash between October 9 and 10.

Monitoring data shows that the attacker had previously withdrawn the related funds in a dispersed manner to 14 addresses, then used NEAR Intents to bridge and convert the funds to the ZEC network, and further carried out privacy protection processing. There are signs of address linkage during the attacker's fund transfer process. Some of the withdrawal transactions reused wallet addresses previously used for deposits; other withdrawal transactions were initiated by wallets associated with the wallet address that paid gas fees when the funds were stolen, thereby helping researchers trace the flow of funds.

Currently, the related funds have been transferred and hidden through multiple on-chain paths. Previously, CryptoBilis was exposed as being involved in a Ledger hardware wallet supply chain security incident. Ledger has confirmed that an affected user's device had unauthorized hardware implantation and stated that it is cooperating with relevant parties and law enforcement agencies in the investigation. Ledger previously reminded users who purchased devices from affected distribution channels and have not yet completed initialization setup not to use them for the time being; users who have already completed setup may consider migrating assets to a new device using a new mnemonic phrase.