SlowMist: 75% of criminal funds on the Ethereum network were laundered through Tornado Cash
The crypto mixer also accounts for the largest part of the initial funding of money laundering incidents on the Ethereum and Bitcoin networks
18.08.2022 - 06:45
669
2 min
0
What’s new? According to a report by blockchain security firm SlowMist, a total of 74,7% of the total amount of criminal funds on the Ethereum network, 300 160 ETH (about $554 million at the Binance rate as of August 18), were laundered through the Tornado Cash cryptocurrency mixer. Of the remaining funds, about 24% (95 570 ETH) are still in hackers’ wallets, while 1,5% (6 250 ETH) were sent to exchanges. In addition, the research also found that Tornado Cash accounted for the largest part of the initial funding of money laundering incidents on the Ethereum and Bitcoin networks.
Tornado Cash situation. On April 17, hackers withdrew $80 million from the Beanstalk Farms DeFi protocol on the Ethereum network, then funneled nearly the entire amount to Tornado Cash. On June 24, hackers stole $100 million from Horizon cross-chain in the Ethereum ecosystem, then funneled them into the mixer as well. Analysts at Elliptic said that the Lazarus group from the DPRK may have been behind the hack.
On August 8, the US authorities imposed sanctions on Tornado Cash, noting that more than $7 billion had been laundered through the service since its inception. Officials also emphasized that it was used by hackers from Lazarus.
After that, the service faced a sharp decline in deposits. The dYdX exchange, the Oasis.appDeFi platform and the Aave DeFi protocol started blocking users whose addresses are linked to Tornado Cash.
For more details on what awaits DeFi projects after the sanctions against Tornado Cash, see GetBlock Magazine’s article.
Useful material?
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Telegram
Twitter