In a recent development reported by PeckShield, a cybersecurity firm, stolen cryptocurrency funds from Hundred Finance have been activated after nearly a year of dormancy. The perpetrator managed to transfer substantial amounts of various cryptocurrencies including Ethereum ($ETH) and stablecoins across different platforms.
#PeckShieldAlert Stolen funds from #HundredFinance are on the move after lying dormant for almost a year. The exploiter removed 784K $3Crv from #Curve & swapped them for ~273 $ETH. Additionally, they swapped 305.6 $WOO, 39 $PAXG, 200K $FRAX, & 100K $DAI for a total of 162.2 $ETH… pic.twitter.com/HZyAPuiarA
— PeckShieldAlert (@PeckShieldAlert) May 6, 2024
Details of the Transactions
The exploiter initially withdrew 784,000 units of 3Crv, a liquidity pool token from Curve Finance, and converted these into approximately 273 $ETH. In addition, they exchanged various cryptocurrencies such as 305.6 $WOO, 39 $PAXG, 200,000 $FRAX, and 100,000 $DAI, culminating in the acquisition of another 162.2 $ETH.
Following these transactions, the exploiter engaged in a series of complex moves between the Optimism and Ethereum blockchains, bridging assets totaling significant values. They transferred 1,034 $ETH (valued around $2.17 million), 842.800 $DAI, 1.11 million $USDT, 1.27 million $USDC, and approximately 457.300 $FRAX.
Once on the Ethereum network, the exploiter continued their activity by swapping 480,000 $USDC for 142.6 Wrapped Ethereum (WETH), 306 $WOO, and 39 $PAXG. They also exchanged 1.11 million $USDT for 500.300 $DAI and 613.800 $FRAX. Additionally, on April 15, 2023, around $786,000 in $USDC was deposited into the Curve 3Pool, indicating a strategy to further launder the funds.