The hackers behind the March hacking of the $625 million Ronin sidechain transferred most of the assets to bitcoin using privacy tools. This is reported by the researcher liteZero from SlowMist.
The attackers, who are allegedly associated with the North Korean Lazarus group, have become the prey of 173,600 ETH and 25.5 million USDC. According to the expert, hackers deposited almost the entire amount in Ethereum into the Tornado Cash mixing service. Only about 6250 ETH they sent to the Huobi, FTX and Crypto.com . There are ~667 ETH left on the addresses of the hackers.
In May, the US Treasury imposed sanctions against the Blender cryptocurrency mixer.
According to the agency, about $20.5 million of the amount stolen from Ronin was laundered through the service.
The expert confirmed that hackers transferred approximately $20.72 million to the mixer from centralized exchanges. The amount is consistent with that determined by the US authorities.
The attackers exchanged the funds passed through Tornado Cash in Ethereum for a “wrapped” version of bitcoin of the Ren Protocol network using decentralized platforms 1inch and Uniswap.