TechFlow reported on June 15 that, according to monitoring by on-chain analyst Ember (@EmberCN), the attacker who led the March THE collateral liquidation incident on the Venus platform sold 1,912 ETH about one hour earlier. The sale brought in $3.26 million, and the funds were used to repay part of the attacker’s borrowing position on Aave.
Ember stated that the Aave borrowing was the same source of funds used in the earlier Venus liquidation manipulation. The address had previously pledged ETH as collateral, borrowed funds, and then used those funds in connection with the Venus liquidation event. The latest ETH sale and repayment therefore represent a partial reduction of that Aave debt.
At the time of the monitoring update, the address still had 6.78 million USDT unpaid on Aave. Aave is an on-chain lending protocol where users can borrow assets against collateral, while Venus is also a decentralized lending platform. The reported activity focuses on the address’s fund flow: ETH was sold, dollars were obtained, and part of the Aave loan was repaid.