Ledger-related attacker deposited 2,990 ETH into Tornado Cash, then bridged to ZEC via NEAR Intents.

BlockBeats news, October 11 — According to on-chain detective Specter on their personal channel, an attacker address associated with the unauthorized hardware implant in a Ledger hardware wallet linked to CryptoBilis deposited 2,990 ETH, worth approximately $7.45 million, into Tornado Cash between October 9 and 10.

Monitoring data shows that the attacker had previously withdrawn the related funds in a dispersed manner to 14 addresses, then used NEAR Intents to bridge and convert the funds to the ZEC network, and further carried out privacy-preserving processing. There are signs of address linkage during the attacker's fund transfer process. Some of the withdrawal transactions reused wallet addresses previously used for deposits; other withdrawal transactions were initiated by wallets associated with the wallet address that paid gas fees during the theft, thereby helping researchers trace the flow of funds.