Addresses linked to the attacker in the CryptoBilis Ledger hardware-wallet incident deposited 2,990.3 Ether (ETH) into Tornado Cash between Oct. 9 and Oct. 10, marking a potentially significant laundering step for funds valued at about $7.45 million.
Ledger has said it is investigating the hardware-wallet supply-chain incident and warned users to remain alert to device security risks. The transfer relates to funds linked to the attacker in the CryptoBilis Ledger incident.
Blockchain investigator Specter said the attacker had previously distributed the funds across 14 addresses before routing them through NEAR Intents and into ZEC for additional privacy processing. Some withdrawal transactions reused deposit addresses, while others were initiated by wallets connected to addresses that paid gas fees during the original theft. Those links may connect the deposit and withdrawal activity across the laundering process.
Funds tied to the incident continue to move as the attacker attempts to conceal their trail. Ledger has said it is investigating the hardware-wallet supply-chain incident and warned users to remain alert to device security risks.
Specter, a blockchain investigator, said the links between deposit and withdrawal activity may connect the laundering steps across the process.
