Raydium hacker funnels $2.7 million through Tornado Cash mixer

Quick Take

  • A hacker routed $2.7 million in stolen ETH through Tornado Cash.
  • The funds were stolen during an exploit of decentralized exchange Raydium in December 2022.

An Ethereum address connected with an exploit of Raydium laundered $2.7 million in ether (ETH) through Tornado Cash on Jan 19., security firm CertiK noted.

In December Raydium, a decentralized exchange built on the Solana blockchain, was hacked for over $4.4 million in different assets. The hacker was able to withdraw Raydium's liquidity pool (LP) tokens into their control after compromising the admin account keys powering Raydium's smart contracts. The hacker later moved the stolen funds to Ethereum.

More than a month after the incident, an address labeled by Etherscan as the exploiter of Raydium, transferred $2.7 million in stolen assets to Tornado Cash. Hackers often funnel stolen assets to Tornado Cash because it allows them to obscure the transaction history.


Keep up with the latest news, trends, charts and views on crypto and DeFi with a new biweekly newsletter from The Block's Frank Chaparro

By signing-up you agree to our Terms of Service and Privacy Policy
By signing-up you agree to our Terms of Service and Privacy Policy

Tornado Cash has been in the spotlight since last year for being sanctioned by the U.S. Treasury Department's Office of Foreign Assets Control (OFAC). Following the sanctions, all US-based individuals and entities are prohibited from interacting with the app, given its potential for money laundering.

Even after the sanctions were announced, Tornado Cash has continued to be widely used by hackers of decentralized finance protocols.

© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

About Author

Vishal Chawla is The Block’s crypto ecosystems editor and has spent over six years covering tech protocols, cybersecurity, artificial intelligence and cloud computing. Vishal likes to delve deep into blockchain intricacies to ensure readers are well-informed about the continuously evolving crypto landscape. He is also a staunch advocate for rigorous security practices in the space. Before joining The Block, Vishal held positions at IDG ComputerWorld, CIO, and Crypto Briefing. He can be reached on Twitter at @vishal4c and via email at [email protected]


To contact the editor of this story:
Tim Copeland at
[email protected]