Hacker Swaps $10.5M DAI for ETH Before Hiding in Tornado Cash

Woofun AI reports that the hacker behind the recent UXLINK exploit has executed a major fund transfer, moving stolen assets into the decentralized privacy protocol Tornado Cash. This immediate action, flagged by Onchain Lens, signals a critical escalation in the laundering process following the breach of the project's cross-chain infrastructure.

The specific transaction involved the purchase of 6,001 ETH using 10.54 million DAI at an average price of $1,757 per coin. Recorded on the Ethereum blockchain approximately one hour ago, this conversion represents a standard tactic employed by malicious actors to shift value across protocols before obscuring the trail.

Woofun AI data shows the precise timing and volume of this swap, confirming the rapid liquidation of stablecoins into volatile assets.

Structurally, the use of Tornado Cash serves to sever the on-chain link between the source and destination addresses, rendering fund tracing significantly more difficult for investigators. This decentralized privacy protocol was sanctioned by the U.S. Treasury Department in 2022, yet its continued deployment by the UXLINK attacker indicates a calculated effort to evade law enforcement tracking. The movement of these assets through a mixer represents a critical phase in the laundering process, exploiting the very regulatory gaps that sanctions aimed to close.

The incident underscores the persistent security challenges within decentralized finance and the enduring risks associated with smart contract vulnerabilities. While Onchain Lens continues to monitor the situation, the integration of stolen funds into Tornado Cash suggests that recovery efforts will face substantial hurdles. This event serves as a stark reminder for DeFi users regarding the necessity of robust security audits and heightened vigilance against such exploits.