DeltaPrime Exploiter Moves 310 ETH to Tornado Cash

The hacker responsible for the November 2024 breach of DeltaPrime, a decentralized finance (DeFi) liquidity protocol, has moved 310 ETH to Tornado Cash.

A hacker has moved 310 ETH to Tornado Cash, according to blockchain security firm PeckShield.

The hacker is known for the November 2024 hack of decentralized finance (DeFi) liquidity protocol DeltaPrime, which saw nearly $4.8 million in crypto stolen from the Arbitrum (ARB) and Avalanche (AVAX) chains.

DeltaPrime Hack: Key Details

The security firm noted that the funds were being laundered. It observed the hacker transferring the 310 ETH to Tornado Cash.

The DeFi protocol suffered a security breach due to a smart contract vulnerability in the protocol’s reward claiming mechanism.

The vulnerability, which arose from a failure to perform proper input validation, allowed the attacker to create and use a malicious trading pair on the platform.

This was the second major breach for DeltaPrime in 2024. The first, in September, was caused by compromised private keys, which allowed the attacker to exploit the protocol’s smart contracts, finally draining about $5.98 million in crypto.

Hacks continue to threaten the security of the crypto industry. February saw the largest crypto heist in the industry’s history when crypto exchange Bybit lost $1.4 billion in an attack.

A report revealed that the Bybit attack, carried out by North Korea’s Lazarus Group, shows the country’s strategies of targeting centralized crypto exchanges through methods such as phishing, supply chain compromises, and private key theft—strategies previously used in incidents like the 2023 Atomic Wallet hack, which saw $100 million in cryptocurrency stolen from over 4,100 individual addresses.

However, in a positive development, Bybit managed to close the gap on its Ethereum assets in less than 72 hours, with support from other crypto trading platforms and brokerages.