Hackers Launder $1M in Ether Through Tornado Cash After CoinStats Exploit

In a troubling event for the crypto world, hackers involved in the CoinStats breach have transferred nearly $1 million worth of Ether (ETH) to the cryptocurrency mixer Tornado Cash. Blockchain security firm CertiK reported that two wallets linked to the exploit moved a combined 311 ETH, valued at around $959,000, to Tornado Cash. This mixing service is notorious for obfuscating transaction trails, often used by cybercriminals to launder stolen funds.

The CoinStats security breach, which occurred on June 22, forced the crypto portfolio management platform to suspend user activity. The attack compromised 1,590 wallets, prompting the company to shut down its application to isolate the incident. Despite the breach, CoinStats assured users that connected wallets and centralized exchanges (CEXes) were not affected. The company advised affected users to move their funds using exported private keys.

In response to the breach, CoinStats has taken significant steps to improve its security. On June 30, the company announced it was optimizing its transaction database and migrating to a more efficient platform. By July 3, CoinStats confirmed that all platform functionalities had been fully restored. The firm also highlighted ongoing upgrades and security audits to prevent future incidents.

On June 26, CoinStats CEO Narek Gevorgyan revealed that the breach resulted from a socially engineered attack on an employee. The attacker tricked the employee into downloading malicious software, compromising the company’s AWS infrastructure. Gevorgyan expressed deep sympathy for the affected users, assuring them that CoinStats is committed to supporting the victims and exploring recovery options.

Community reports indicate substantial losses, with one wallet reportedly losing nearly $9 million in MKR tokens. As of July 5, CoinStats continues to investigate the breach and promises to implement robust security measures. The company plans to provide further updates on support measures for the victims soon.

This incident underscores the critical importance of security in the cryptocurrency space and serves as a stark reminder of the vulnerabilities that can be exploited by cybercriminals.

Get exclusive insider access to daily market intel reports across web3 –lifetime NFT access.