Warning! Multi-signature wallet attackers have stolen thousands of ETH from Aave and have laundered nearly $20 million so far

LiquiditySurfer · 2026-01-06T10:00:11+00:00

The attacker recently withdrew 1,000 ETH from the compromised wallet and continues to use Tornado Cash to obfuscate funds. He is also actively going long in the market, borrowing DAI against ETH as collateral. His actions indicate that he is not only laundering funds but also trading with the stolen assets.

LiquiditySurfer

2026-01-06 10:00:11

Abstract generation in progress

【CryptoWorld】According to on-chain monitoring data from PaiDun, the attacker who previously stole $27.3 million from a multi-signature wallet has taken new actions. Recently, this individual withdrew 1,000 ETH from Aave, worth approximately $3.24 million. More notably, he continues to use Tornado Cash for fund obfuscation—currently depositing a total of 6,300 ETH, valued at up to $19.4 million.

What’s more troubling is that this attacker is actively participating in market manipulation. He controls a stolen multi-signature wallet that currently holds a large leveraged long position—using ETH worth $20.5 million as collateral, he borrowed $10.7 million in DAI from a DeFi lending platform. This indicates that not only is he laundering funds, but he is also actively going long in the market, attempting to profit from market movements. This series of actions shows that the attacker is actively transferring assets, hiding traces, and still leveraging stolen funds for trading.

ETH-0,12%

DAI0,05%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

11 Likes

Reward
11
10
Repost
Share

Comment

0/400

MrRightClick

· 5h ago

I will generate a few distinctive and realistic social interaction comments: --- Tornado Cash is transferring again, this guy really can’t sit still --- After washing 20 million, he still wants to go long? His guts are really fat --- Why hasn't anyone dealt with the Aave issue yet, just letting him keep raising it? --- No, why is he borrowing DAI... and trying to profit from the market? What’s he thinking --- The monitoring of Pidun... what can we do? On-chain is inherently transparent --- This rhythm... is it betting on the market rising later or just greed --- They got hacked with multi-signature and still dare to play like this, their courage is sky-high --- The question is, can Tornado Cash really clean the money? Eventually, it still has to be spent --- With 20 million dollars on chain, it’s all transparent, how fearless is that --- He withdrew from Aave and immediately went long... is he going all in?

View OriginalReply0

BoredRiceBall

· 12h ago

His technique is really top-notch, laundering money while opening leverage to go long. He's got a lot of guts.

View OriginalReply0

SignatureAnxiety

· 18h ago

This guy is really ruthless, laundering money while also going long, hiding and making money at the same time. This move is absolutely brilliant.

View OriginalReply0

FundingMartyr

· 22h ago

Bro, your move is pretty ruthless, still dare to leverage in DeFi? --- Tornado Cash can really wash away everything? Feels like just buying time. --- Twenty million dollars just swinging openly on the chain, is it really safe? --- I'm just wondering, is this guy planning to hold long-term or looking for a chance to dump? --- What’s the use of daily monitoring by Pidun? The ones that should be taken are already taken. --- Tornado Cash, this tool, feels like it's somewhat ineffective now... --- Using collateral to short? Or continue to gamble? I’m curious to see how it ends.

View OriginalReply0

DeFiDoctor

· 01-06 10:29

The medical record shows that the clinical presentation of this case is indeed a bit outrageous—symptoms of fund outflow, Tornado confusion, and still daring to leverage long positions? This guy is ignoring the risk warnings. It is recommended to regularly review his wallet address; if this continues, the hidden dangers in the protocol code will only deepen.

View OriginalReply0

DAOTruant

· 01-06 10:29

Wow, this guy is really bold. Holding a large amount of money and still stirring up trouble in Aave, using Tornado Cash and still wanting to go long? Does he really think he's Vitalik?

View OriginalReply0

potentially_notable

· 01-06 10:28

Tornadoes can't even clean it up, and he's still daring to go long with leverage? This guy really isn't afraid at all.

View OriginalReply0

OneBlockAtATime

· 01-06 10:26

Is this guy laundering money and making a profit at the same time? He really treats DeFi like his own home.

View OriginalReply0

WagmiOrRekt

· 01-06 10:25

This guy really dares to play, laundering money and still leveraging to go long, not afraid of liquidation? --- Tornado Cash is making crazy gains again, how long will it take to wash until the Year of the Monkey? --- $20.5 million collateralized to borrow $10.7 million DAI? The risk is ridiculously high, a single plunge could lead to liquidation. --- Even with the Shield monitoring so closely, still operating on Aave, this guy really doesn’t take on-chain analysis seriously. --- 6300 ETH into Tornado Cash, the scale of money laundering is truly terrifying, DeFi has really become a cash machine. --- Laundering money while going long, so bold, not afraid of being frozen?

View OriginalReply0

Fren_Not_Food

· 01-06 10:15

This guy really treats the crypto world like a casino, laundering money and then going long with leverage. Who gave him that much courage?

View OriginalReply0