Share this article
Thousands of Ether From Ronin Exploit Moved to Tornado Cash, Data Show
More than 2,001 ether were moved Monday from addresses connected to the $625 million exploit, with about 70% passing to the privacy tool in the early hours, on-chain data show.
Updated May 11, 2023, 5:28 p.m. Published Apr 4, 2022, 9:25 a.m.
Make us preferred on Google
In this article
The exploiter behind Ronin’s unprecedented $625 million bridge attack from last week apparently moved some 1,400 ether (ETH) to privacy tool Tornado Cash on Monday morning during Asia hours, and then the remaining 600 ETH during European hours, on-chain data connected to the exploit’s addresses show.
- The main Ethereum address associated with the exploit sent more than 2,001 ETH in two transactions to a different address – labeled “Ronin Bridge Exploiter 8” on the tracking tool Etherscan – in early Asian hours, the data shows.
- Some 1,400 ETH were then sent to Tornado Cash over 14 transactions, the data shows. The moved ether was valued at over $4.9 million at writing time. The remaining 600 ether, valued at $2 million, was moved to Tornado Cash in European hours, the data show.
- The main wallet that holds stolen funds still has in excess of 173,000 ETH, valued at over $607 million, at writing time.
- Tornado enhances the privacy of transactions by breaking the on-chain link between a source and a destination address. This allows exploiters and hackers to mask their addresses while withdrawing illicitly gained funds.
- Several thousands of ether had previously been moved to other wallets, data apparently shows. Those transactions ranged from 1 ETH to over 10 ETH.
- Ronin Network was hit by a $625 million exploit last week that affected Ronin validator nodes for Sky Mavis, the publisher of the popular Axie Infinity game, and the Axie DAO.
- The attacker “used hacked private keys in order to forge fake withdrawals” from the Ronin bridge across two transactions, as seen on Etherscan, Ronin said in a blog post on Substack.
- Investigations are underway, with all former Sky Mavis validators said to have been replaced.
See also: So You’ve Stolen $600M. Now What?
STORY CONTINUES BELOW
UPDATE (April 4, 13:16 UTC): Updates story to reflect additional movement of ether out of Ronin Bridge Exploiter 8 address during European hours.
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Solana’s new phase is ‘much more about finance,’ says Backpack CEO Armani Ferrante
The Solana ecosystem has spent the past year doubling down on a financial infrastructure, Backpack CEO Armani Ferrante told CoinDesk.
What to know:
- Solana’s latest phase looks a lot less flashy than its memecoin-fueled highs, and that may be the goal.
- Armani Ferrante, CEO of crypto exchange Backpack, told CoinDesk in an interview the Solana ecosystem has spent the past year doubling down on a more sober focus: financial infrastructure. A
- fter years of experimentation as the wider crypto industry focused on NFTs, games and social tokens, attention is now shifting back toward decentralized finance, trading and payments.
Top Stories
