Tectonic2026-09-03 23:47:57Tectonic Attacker Deposits 2,658.9 ETH into TornadoCashAccording to on-chain data, the address labeled as Tectonic attacker has deposited 2,658.9 ETH (approx. $6.65 million) into the TornadoCash mixer, marking the latest movement of funds from the hack. The transfer aims to obscure transaction history via the privacy protocol.810
Ethereum2026-08-21 01:26:47On-chain analyst says one entity bought another 3,385.82 ETHAn on-chain analyst tracking wallet activity said a single entity has added another 3,385.82 ETH to its position. Since yesterday, the same entity has accumulated 16,699.32 ETH through CowSwap, with the total purchase value exceeding $35.84 million. The reported average cost stands at $2,146.42 per ETH, and the position is currently showing a profit of $3.335 million. The analyst also said the funds used for the purchases came from a mixer. No additional identity details about the buyer were disclosed in the update. The latest transaction adds to a series of buys observed since yesterday, according to the monitoring data cited by ChainCatcher.1430
Specter2026-08-20 14:07:36Specter flags Coldcard claim as 73 BTC moved through mixers and into phishing Tornado Cash interfaceOn-chain investigator Specter has raised questions about a claimed Coldcard hack after tracing 73 BTC linked to the case. According to Specter, the person described as a victim said funds were moved from Bitcoin to Ethereum after the incident. But blockchain data showed the 73 BTC, valued at about $4.6 million, had come from the Whirlpool mixer two weeks earlier. Part of the funds was then bridged to Ethereum and deposited through a phishing Tornado Cash interface. Specter said two mixers were used during the transfers. The investigator also said the individual had appeared in Telegram groups tied to private key searching and brute-force cracking. Based on those findings, Specter said the supposed victim may in fact be a threat actor, and that the funds may themselves have been stolen by another threat actor.1040
COLDCARD2026-08-05 21:37:04Galaxy Research: 1,159 BTC in Largest COLDCARD Theft Stay Frozen as Smaller Attacker Starts MixingAccording to Bitcoin News, Galaxy Research has disclosed details on the largest known COLDCARD theft, involving 1,159 BTC. Those funds are spread across seven attacker addresses and have not yet been touched — no Bitcoin has been cashed out or sent through a mixing service. The coins were stolen in a window of 41 minutes, yet roughly 600 attacker addresses have already been flagged by law enforcement agencies, exchanges and blockchain analytics companies. In a separate development, a smaller-scale attacker appears to have started washing funds. On-chain analysts tracked 64 BTC moving into a mixer; initially only about 10 BTC completed the mixing process, while 54 BTC returned as change and were split into outputs of roughly 7 BTC each for further mixing. Analysts note these unusually large outputs are still easy to follow, so the laundering effort remains relatively transparent.1820
COLDCARD2026-08-05 21:37:52Galaxy Research: Largest Known COLDCARD Theft Involves 1,159 BTCAccording to Bitcoin News, Galaxy Research says the largest known COLDCARD theft involved 1,159 BTC. The stolen coins sit across seven attacker addresses and have not been touched: 0 BTC has been cashed out or sent through a mixer. The bitcoin was stolen within a 41-minute window. Around 600 attacker addresses have already been tagged by law enforcement agencies, exchanges, and blockchain analytics companies. At the same time, a smaller attacker appears to have started cleaning funds. On-chain analysts tracked 64 BTC moving into a mixer. Of that amount, only about 10 BTC initially completed the mixing process; 54 BTC came back as change. That change was later split into outputs of roughly 7 BTC each, likely for another round of mixing. Analysts note that these unusually large outputs remain easy to follow, which leaves the laundering attempt relatively transparent. The main stack, meanwhile, remains dormant across those seven marked addresses.1820
AFX Trade2026-07-23 17:20:58Stolen funds from three exploited protocols moved across chains into mixer, with some assets recoveredAFX Trade, Verus Bridge, and B² Network previously lost a combined $35.56 million in separate attacks, and the latest update says the attacker has moved the stolen funds across chains into a mixer. Some of the assets have already been recovered. Verus Bridge and other affected protocols have suspended interaction functions while project teams work with security firms to trace the funds. A security analysis report has also been issued. In Verus Bridge’s case, the protocol was hit twice in three months through the same vulnerability. The team said it will restore services as soon as possible and compensate affected users.1800
ResolvLabs2026-07-16 23:23:49ResolvLabs exploiter moves 580 ETH after March theft, Onchain Lens saysOnchain Lens said the attacker tied to the ResolvLabs exploit has moved funds again after stealing about $25.9 million in March. In the past few hours, 580 ETH, worth roughly $1.09 million, was transferred. The moved funds are being routed through a crypto mixer, according to the monitoring update. The transfer marks another on-chain movement linked to the exploiter’s holdings following the March theft.1930
Europol2026-07-04 05:30:14Europol, Swiss Police Dismantle ‘Cryptomixer’ in Major Bitcoin Laundering CrackdownLaw enforcement agencies in Switzerland and Germany shut down Cryptomixer.io, one of Europe’s largest illicit Bitcoin-mixing operations. Authorities seized three servers, the domain, more than EUR 25 million in bitcoin, and over 12 terabytes of data, which may provide new leads tied to ransomware groups, dark-web marketplaces, and cross-border laundering networks.480