# Wallets Linked to CryptoBilis Ledger Incident Move 2,990 ETH to Tornado Cash

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/29776
Published: 2026-10-11T10:25:11.000Z
Updated: 2026-10-11T10:25:11.000Z
Section: Technology

> The funds were valued at about $7.45 million after moving through 14 addresses and a cross-chain route involving NEAR Intents and ZEC.

Addresses linked to the attacker in the CryptoBilis Ledger hardware-wallet incident deposited 2,990.3 Ether (ETH) into Tornado Cash between Oct. 9 and Oct. 10, marking a potentially significant laundering step for funds valued at about $7.45 million.

Blockchain investigator Specter said the attacker had previously distributed the funds across 14 addresses before routing them through NEAR Intents and into ZEC for additional privacy processing.

Some withdrawal transactions reused deposit addresses, while others were initiated by wallets connected to addresses that paid gas fees during the original theft, Specter said. Those links may connect the deposit and withdrawal activity across the laundering process.

Funds tied to the incident continue to move as the attacker attempts to conceal their trail. Ledger has said it is investigating the hardware-wallet supply-chain incident and warned users to remain alert to device security risks.