1. Recent Transactions
2. Use of Tornado Cash
3. History of WazirX Hack

WazirX hackers are active again, moving 10,000 Ethereum, which significantly complicates the recovery of the stolen funds.

Recent Transactions

On September 19, transactions occurred from the address “[0x46b9d..](https://etherscan.io/address/0x46b9d6f8424eb8075bfaa28127446e5b38340a0a)”, involving 50 transactions of 100 Ether and 1 transaction of 5,001 Ether. Prior to this, on September 17, similar transactions happened from the address “[0x5990c7](https://etherscan.io/address/0x5990c7e24816bd103982b02e82ebf3adb49b6a6a)”, involving 50 transactions of 100 Ether.

Use of Tornado Cash

According to on-chain data from Etherscan, the hackers moved 10,000 Ether early Wednesday, bringing the total to 15,000 Ether since Monday night. Despite these movements, the hacker’s wallet still holds over $50 million in tokens, primarily Ether. Tornado Cash is often used by crypto criminals to obscure transaction paths, making it difficult to trace the origins of stolen funds.

History of WazirX Hack

In July, hackers targeted a multisig wallet at WazirX, leading to a loss of over $100 million in Shiba Inu (SHIB) and $52 million in Ether. These stolen funds account for more than 45% of WazirX’s total reserves, according to a report from June 2024. The exchange has since initiated a restructuring process to address its liabilities. WazirX founder Nischal Shetty has shifted the blame multiple times during this restructuring period, initially claiming that the custodian Liminal was responsible for the breach, which Liminal denied. In August, Shetty alleged that Binance held the majority of WazirX parent Zettai Labs’ funds, restricting their ability to compensate affected customers. [Binance refuted these claims](https://www.cryptotimes.io/2024/09/17/binance-trashes-wazirx-claims-and-rejects-liability-for-hack/) in a blog post.

The recent transactions and the use of Tornado Cash by the hackers significantly complicate the recovery of the stolen funds. These events raise important questions about the security of cryptocurrency exchange platforms.