Massive Crypto Assets Obfuscated in Multi-Stage Laundering
The movement of funds linked to a recent hardware wallet security incident has drawn close scrutiny from on-chain analysts. According to disclosures made by investigator Specter on October 11, an address associated with the earlier Ledger exploit executed a series of sophisticated asset transfers.
The Laundering Pathway Revealed
Monitoring data shows that between October 9 and 10, the attacker deposited a total of 2,990 Ether (ETH) into a well-known Ethereum privacy protocol. At the time, this stash was worth approximately $7.45 million.
This was not the final stop for the funds. After the initial deposit, the attacker proceeded with more covert steps:
- Fragmented Withdrawals: The funds were withdrawn to 14 separate addresses to reduce the traceability of any single transaction.
- Cross-Chain Bridge: The assets were then bridged via NEAR's cross-chain infrastructure to the ZEC network, which emphasizes privacy.
- Deep Obfuscation: On the ZEC network, the funds underwent further privacy-enhancing processing in an attempt to sever all links to their origin.
The Flaws Left for Investigators
Despite the attacker's efforts to cover their tracks, the transfer process left behind traceable clues. On-chain analysts noted that certain operations revealed connections between addresses.
For instance, some wallet addresses used for withdrawals had previously been used to initiate deposit transactions. Furthermore, other addresses initiating withdrawals were found to be linked to the wallet that paid the gas fees during the initial fund theft. These instances of address reuse provided crucial leads for researchers tracking the ultimate destination of the substantial sum.
The community and relevant authorities are now closely monitoring this pattern of using cross-chain and privacy tools for money laundering, aiming to strengthen security defenses across the crypto ecosystem.