WazirX Hacker Moves $11M Stolen Ether to Tornado Cash
Wallet data tracked by Arkham shows over 5,000 ETH, worth just over $11 million at current prices, from July’s attack on crypto exchange WazirX was moved to a new address at 07:19 UTC.
The North Korean entity responsible for the hack on India's WazirX crypto exchange moved over $11 million in stolen ether ETH$3,034.52 to Tornado Cash early Monday, aiming to mask the transaction trail.
The breach in July resulted in the loss of over $100 million in SHIB, $52 million in ETH, and other assets, representing a significant portion of WazirX's reserves, with ongoing efforts to manage the fallout through restructuring.
The North Korean entity behind India’s biggest crypto hack moved $11 million in stolen ether ETH$3,034.52 early Monday in the latest batch of transfers to mixing service Tornado Cash.
Wallet data tracked by Arkham shows over 5,000 ETH, worth just over $11 million at current prices, from July’s attack on crypto exchange WazirX was moved to a new address at 07:19 UTC.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
By signing up, you will receive emails about CoinDesk products and you agree to our terms of use and privacy policy.
Then, $1.2 million in tokens from that address were sent to Tornado Cash over five different transfers.
Tornado Cash allows crypto users to exchange tokens while masking wallet addresses on various blockchains. The service, by itself, is not nefarious but is commonly used by crypto criminals to clean an online trail that could lead to the identity of those moving stolen funds.
The moves follow a $4 million transfer from last week, as first reported by CoinDesk. The hacker’s main address holds over $107 million worth of various tokens - with a majority in ether at $100 million.
(Arkham)
In July, WazirX was hit by a security breach in one of its multisig wallets, causing over $100 million in SHIB$0.0₅8371 and $52 million in ether, among other assets, to be drained from the exchange.
The stolen funds accounted for over 45% of the total reserves cited by the exchange in a June 2024 report – and the exchange has since filed for a restructuring process to clear liabilities.
As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
Alchemy co-founder and president Joe Lau said stablecoin adoption is exploding as banks, fintechs and payment platforms push beyond the USDT/USDC exchange era.
What to know:
Stablecoin usage is quickly broadening from crypto-native exchanges into payments, payroll and treasury as companies chase 24/7, digital-native settlement, according to Alchemy Co-founder and President Joe Lau.
Banks are pushing tokenized deposits as a regulated, bank-native alternative that delivers stablecoin-like benefits for institutional clients.
The endgame is a two-track system — stablecoins for open, two-party settlement; deposit tokens for bank ecosystems, until scale forces convergence and competition, Lau said.