Signal
Dormant wallet tied to 2023 mixin exploit moves ETH, routes funds via tornado cash
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-02-13 13:11 UTCUpdated 2026-02-13 17:52 UTC
rsstelegramx
security_incidentonchain_activityethereummixerstornado_cashmixin_network
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
A wallet linked to the 2023 Mixin Network exploit resurfaced after roughly two years of inactivity, moving a multi-million-dollar tranche of ETH and routing it through Tornado Cash. The activity has drawn renewed attention to lingering hack proceeds and how dormant attacker-linked wallets can re-enter the market via mixers and fresh addresses.
Entities
EthereumMixin NetworkTornado CashLookonchainETHBTC
Score total
2.02
Momentum 24h
5
Posts
5
Origins
4
Source types
3
Duplicate ratio
20%
Why now
- Wallets tied to the Mixin exploit reportedly became active after ~two years of dormancy
- Multiple outlets flagged fresh transfers of ETH to Tornado Cash in the last 24 hours
- On-chain trackers attributed subsequent movements to newly created wallets
Why it matters
- Dormant hack-linked wallets reactivating can reintroduce stolen funds into circulation
- Use of Tornado Cash highlights ongoing laundering pathways for illicit crypto proceeds
- On-chain movements can trigger renewed monitoring by exchanges and compliance teams
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- Wallets linked to the 2023 Mixin Network exploit became active again after nearly two years and sent ETH to Tornado Cash.
- Lookonchain-tracked activity shows 2,005 ETH transferred to Tornado Cash, followed by distributions to new wallets and reported selling activity.
How sources frame it
- Decrypt: neutral
- The Block: neutral
- WuBlockchain (citing Lookonchain): neutral
- U.Today: neutral
Cluster centers on dormant wallets tied to the 2023 Mixin Network exploit moving ETH and routing funds through Tornado Cash.
All evidence
All evidence
$3.85 Million in Ethereum From Mixin Network Hack Sent to Tornado Cash
Decrypt · decrypt.co · 2026-02-13 17:50 UTC
Wallet tied to $200M Mixin Network hack moves ETH after over two years of dormancy: onchain data
the_block_crypto · theblock.co · 2026-02-13 14:56 UTC
Ethereum Hacker Moves Stolen ETH After Two Years in Dormancy
U.Today · u.today · 2026-02-13 14:33 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 0
Top publishers (this list)
- Decrypt (1)
- the_block_crypto (1)
- U.Today (1)
- WuBlockchain (1)
Top origin domains (this list)
- decrypt.co (1)
- theblock.co (1)
- u.today (1)
- t.co (1)