{"id":66941,"date":"2022-09-09T17:55:19","date_gmt":"2022-09-09T14:55:19","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=66941"},"modified":"2025-09-07T03:59:07","modified_gmt":"2025-09-07T00:59:07","slug":"hackers-launder-0-5-million-linked-to-daomaker-hack-via-tornado-cash","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hackers-launder-0-5-million-linked-to-daomaker-hack-via-tornado-cash\/","title":{"rendered":"Hackers launder $0.5 million linked to DAOMaker hack via Tornado Cash"},"content":{"rendered":"<p>An Ethereum address associated with the DAOMaker exploit laundered around 500,000 DAI stablecoin. This was independently reported by PeckShield and CertiK.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/CertiKSkynetAlert?src=hash&#038;ref_src=twsrc%5Etfw\">#CertiKSkynetAlert<\/a> \ud83d\udea8<\/p>\n<p>We are seeing a movement of 500,000 <a href=\"https:\/\/twitter.com\/search?q=%24DAI&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$DAI<\/a> to <a href=\"https:\/\/twitter.com\/TornadoCash?ref_src=twsrc%5Etfw\">@TornadoCash<\/a> from EOA 0x0B789.<\/p>\n<p>The address is directly connected to the DAOMaker exploiter who stole funds from <a href=\"https:\/\/twitter.com\/TheDaoMaker?ref_src=twsrc%5Etfw\">@TheDaoMaker<\/a>.<\/p>\n<p>Stay safe out there! <a href=\"https:\/\/t.co\/S22RFcA3N2\">pic.twitter.com\/S22RFcA3N2<\/a><\/p>\n<p>\u2014 CertiK Alert (@CertiKAlert) <a href=\"https:\/\/twitter.com\/CertiKAlert\/status\/1568019092963053568?ref_src=twsrc%5Etfw\">September 8, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u00abPeckShield noted that the address labeled as the DAOMaker hacker transferred 500,000 DAI to Tornado Cash,\u00bb the company wrote.<\/p>\n<\/blockquote>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&#038;ref_src=twsrc%5Etfw\">#PeckShieldAlert<\/a> <a href=\"https:\/\/twitter.com\/hashtag\/Phishing?src=hash&#038;ref_src=twsrc%5Etfw\">#Phishing<\/a> PeckShield has detected the address labeled as DAOMaker Exploiter has transferred 500k <a href=\"https:\/\/twitter.com\/search?q=%24DAI&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$DAI<\/a> to TornadoCash <a href=\"https:\/\/t.co\/6VXfkoaCWO\">pic.twitter.com\/6VXfkoaCWO<\/a><\/p>\n<p>\u2014 PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1568052030413111297?ref_src=twsrc%5Etfw\">September 9, 2022<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>In August 2021, an unknown attacker targeted the DAOMaker platform and <a href=\"https:\/\/forklog.com\/en\/news\/unknown-attackers-withdrew-more-than-7-million-in-usd-coin-from-the-dao-maker-platform\">unauthorisedly withdrew more than $7 million in USDC<\/a>.<\/p>\n<p>A year later, the Tornado Cash mixing service <a href=\"https:\/\/forklog.com\/en\/news\/us-sanctions-tornado-cash-the-ethereum-mixer\">was placed on the sanctions list<\/a> by the U.S. Treasury. The agency suspected the platform had laundered around $7 billion since 2017. More than $455 million of those were linked to North Korean hackers.<\/p>\n<p>Chainalysis said it helped recover <a href=\"https:\/\/forklog.com\/en\/news\/chainalysis-helps-authorities-seize-30m-of-ronin-hack%e2%80%91related-cryptocurrency\">cryptocurrency valued at over $30 million<\/a> from the Ronin sidechain&#8217;s $625 million <a href=\"https:\/\/forklog.com\/en\/news\/ronin-the-ethereum-sidechain-hacked-attacker-siphons-625-million\">March hack<\/a>. Hackers had been actively using the popular Ethereum mixer.<\/p>\n<p><a href=\"https:\/\/forklog.com\/en\/news\/ronin-hackers-convert-assets-into-bitcoin-and-use-mixers\">Researcher \u20bfliteZero from SlowMist<\/a> also confirmed that the attackers used Tornado Cash to launder funds stolen in the Axie Infinity network. <\/p>\n<p>Follow ForkLog&#8217;s Bitcoin news on our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 news on cryptocurrencies, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An Ethereum address associated with the DAOMaker exploit laundered around 500,000 DAI stablecoin. This was independently reported by PeckShield and CertiK.<\/p>\n","protected":false},"author":1,"featured_media":66942,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1314],"class_list":["post-66941","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-tornado-cash"],"aioseo_notices":[],"amp_enabled":true,"views":"7","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/66941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=66941"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/66941\/revisions"}],"predecessor-version":[{"id":66943,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/66941\/revisions\/66943"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/66942"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=66941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=66941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=66941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}