Wallets Linked to CryptoBilis Ledger Incident Move 2,990 ETH to Tornado Cash

Addresses linked to the attacker in the CryptoBilis Ledger hardware-wallet incident deposited 2,990.3 Ether (ETH) into Tornado Cash between Oct. 9 and Oct. 10, marking a potentially significant laundering step for funds valued at about $7.45 million.

Blockchain investigator Specter said the attacker had previously distributed the funds across 14 addresses before routing them through NEAR Intents and into ZEC for additional privacy processing.

Some withdrawal transactions reused deposit addresses, while others were initiated by wallets connected to addresses that paid gas fees during the original theft, Specter said. Those links may connect the deposit and withdrawal activity across the laundering process.

Funds tied to the incident continue to move as the attacker attempts to conceal their trail. Ledger has said it is investigating the hardware-wallet supply-chain incident and warned users to remain alert to device security risks.