TechFlow reported on June 15 that, according to monitoring by on-chain analyst EmberCN (@EmberCN), the attacker who led the THE collateral liquidation incident on the Venus platform in March sold 1,912 ETH about one hour earlier. The sale brought in $3.26 million.
The funds were used to repay part of the attacker’s borrowing on Aave. EmberCN noted that this loan was the same source of funds the attacker previously obtained by pledging ETH, and those borrowed funds were then used to manipulate the liquidation process on Venus.
At the time of the monitoring update, the address still had 6.78 million USDT unpaid on Aave. The latest on-chain transaction continues the fund-flow trail following the Venus THE collateral liquidation incident and shows that the address still carries an outstanding Aave debt balance.

