Ledger attacker transferred 2990 ETH to Tornado Cash

Chain detective Specter posted a message on his personal channel stating that his monitoring data showed that in the two days from October 9 to 10, the attacker's address related to the CryptoBilis Ledger hardware wallet incident transferred 2,990.3 ETH to Tornado Cash, approximately US$7.45 million. Further tracking revealed that the attacker had previously withdrawn funds to 14 addresses in batches, and then crossed the chain to the ZEC chain through the NEAR Intention protocol and completed privacy processing. It is worth noting that some withdrawal transactions reuse early deposit addresses, and some transactions are initiated by wallets associated with the address where Gas fees are paid when funds are stolen. These behaviors all point to a potential connection between the flow of funds and the withdrawal operation. Currently, the attacker is still carrying out fund transfers and covert operations.