KyberSwap Hacker Moves Another 2,000 ETH to Tornado Cash, Total Laundered Reaches $40 Million

The individual responsible for the $48.8 million KyberSwap exploit has deposited an additional 2,000 Ether (ETH) into the cryptocurrency mixing protocol Tornado Cash, according to blockchain security firm PeckShield. This latest transaction brings the total amount laundered by the hacker over the past two years to 16,100 ETH, valued at approximately $40 million.

Continued Laundering Activity

The address, which security researchers have linked to Andean Medjedovic, has been steadily moving stolen funds through Tornado Cash since the December 2023 attack on KyberSwap. The exploit targeted the decentralized exchange’s Elastic Pools, draining millions from liquidity providers. Medjedovic was later indicted by U.S. authorities on charges including wire fraud and money laundering.

Blockchain data shows that the hacker has been moving funds in relatively small batches, likely to avoid triggering automated alerts from exchanges and law enforcement. The use of Tornado Cash, a protocol sanctioned by the U.S. Treasury Department in 2022, makes it significantly harder to trace the ultimate destination of the stolen cryptocurrency.

Implications for DeFi Security

The KyberSwap case remains one of the most high-profile DeFi exploits in recent years, and the continued laundering activity highlights ongoing challenges in recovering stolen digital assets. While blockchain analytics firms have become more sophisticated at tracking fund movements, mixing protocols like Tornado Cash continue to provide a layer of obfuscation that complicates law enforcement efforts.

Why This Matters for Crypto Users

For everyday crypto investors, this case underscores the persistent security risks within decentralized finance. Even after an exploit is publicly identified and the hacker is named, stolen funds can remain in motion for years. It also raises questions about the effectiveness of sanctions on mixing services, as the KyberSwap hacker has continued to use Tornado Cash despite its legal restrictions.

Conclusion

The latest deposit by the KyberSwap hacker serves as a reminder that DeFi security incidents have long tails. While authorities have made arrests and indictments, the laundering of stolen assets continues, keeping pressure on both law enforcement and the crypto industry to develop better tracking and recovery mechanisms. The total amount laundered now stands at 16,100 ETH, a significant portion of the original $48.8 million stolen.

FAQs

Q1: Who is the KyberSwap hacker?
The hacker is believed to be Andean Medjedovic, who was indicted by U.S. authorities for allegedly exploiting KyberSwap’s Elastic Pools in December 2023, stealing $48.8 million.

Q2: What is Tornado Cash and why do hackers use it?
Tornado Cash is a decentralized crypto mixing protocol that obscures the transaction trail by pooling funds from multiple users. Hackers use it to launder stolen cryptocurrency and make it harder for authorities to trace.

Q3: How much has the KyberSwap hacker laundered so far?
According to PeckShield, the hacker has deposited a total of 16,100 ETH into Tornado Cash over the past two years, worth approximately $40 million at current prices.