Following the mid-November hack of Kronos Research, where approximately $26 million was stolen via stolen API keys, the hacker, identified as Hacker 5 by PeckShield, continues to move and launder the stolen funds. Recent transactions indicate a significant transfer of Ethereum to Tornado Cash, raising concerns about the ongoing laundering operation.

#PeckShieldAlert #KronosResearch Hacker 5: The labeled address has transferred 200 $ETH to #Tornadocash and approximately 1,314 $ETH (worth around $4 million) to a new address 0x164A…D5c4, and started laundering them via #Tornadocash#KronosResearch was hacked in mid-November… pic.twitter.com/7YOVuNpebd

— PeckShieldAlert (@PeckShieldAlert) May 7, 2024

The labeled address linked to Hacker 5 has transferred 200 Ethereum (ETH) to Tornado Cash, a privacy-focused Ethereum mixer. Additionally, approximately 1,314 ETH, equivalent to around $4 million, has been moved to a new address with the identifier 0x164A…D5c4. These transactions mark a continuation of the hacker’s efforts to obscure the origin of the stolen funds.

Utilization of Tornado Cash

Tornado Cash, a popular Ethereum mixing service, allows users to break the on-chain link between the sender and receiver of Ethereum transactions, enhancing privacy and anonymity. By utilizing Tornado Cash, the hacker aims to obfuscate the trail of the stolen funds, complicating efforts to track and recover them.

The continued movement and laundering of stolen funds raise concerns about the security and integrity of cryptocurrency platforms and services. Despite efforts to enhance security measures, hackers continue to exploit vulnerabilities, resulting in substantial financial losses for affected parties.