The exploiter behind the $22 million theft of Bitrue’s crypto assets has started to move $30 million worth of crypto and deposit it into Tornado Cash.
Blockchain security firm PeckShieldAlert reported today on X that the address tied to the exploit began moving millions worth of crypto, including 5,111 ether ($ETH) and 16 million DAI, to a new address.
Since then, another crypto security firm, CertiK, has reported that the exploiter deposited 1,000 $ETH worth $2.7 million into Tornado Cash, a recently unsanctioned crypto mixer popular with privacy advocates and cybercriminals looking to launder ill-gotten gains.
Read more: Bitcoin DeFi project ALEX exploited again, aBTC depegs
The Bitrue exploiter previously swapped 150 billion Shiba Inu tokens and 756 million HOT tokens for roughly 1,500 $ETH, before sending a portion of that to Tornado Cash.
Crypto exchange Bitrue suspended customer withdrawals in 2023 after one of its hot wallets was hacked and drained for a sum it claims equaled 5% of its overall reserves.
$XRP holders accuse Bitrue of stealing funds
Bitrue’s security, however, may well still be lax. $XRP holder (and advocate) “PapaBear” claimed that $XRP, worth $4,562 at the time of writing, was taken from his Bitrue wallet last night.
Read more: ZKasino exploiter saw $27M liquidated on Hyperliquid trade
He says it’s not possible for any hackers to bypass his Google authentication, and after speaking with another $XRP influencer, claims that insiders from Bitrue are responsible and are outright stealing user funds.
Protos has reached out to Bitrue for comment on PapaBear’s allegations.
protos.com