Phemex was hacked, and $85 million in funds began to flow, with some entering Tornado Cash

ChainCatcher news reports that, according to Global Ledger analysis, the stolen funds of $85 million from the cryptocurrency exchange Phemex are flowing through a series of transfers, protocols, and mixing services. The hackers have begun to split the funds into multiple new addresses and transfer them to the Tornado Cash mixer.

The first batch of 2080 ETH (approximately $6 million) has been dispersed to 14 new addresses, with less than 4000 ETH remaining in the main attack wallet. The transfer method involves multiple hops and cross-chain interactions.

In addition to directly transferring to Tornado Cash and eXch mixers to anonymize the funds, the hackers sometimes also use platforms like Wintermute, DLN Trade protocols, and THORChain to swap assets.