Security· ★★★★· bearish·

Investigators trace $103.4M stolen from Ledger clients through Tornado Cash and Zcash

  • —YFarmX puts the haul at $103.4 million from 530 wallets on seven blockchains
  • —Tether blacklisted 37 addresses and froze $10 million in USDT from October 9
  • —The attacker bypassed blacklisting via USDD, THORChain and seven waves of Tornado Cash deposits
  • —YFarmX linked all 108 Zcash pool withdrawals back to their original lots
Why it matters: The dispute over liability for thefts via authorized reseller CryptoBilis could reshape security requirements for hardware wallets.
Source: Journal du Coin