Crypto Hacker Behind Infini Exploit Returns, Moves $32M ETH in Fresh Transfers

• The Infini exploiter reactivates after months and scoops up $13M in ETH during the dip.
• Funds quickly routed to Tornado Cash, reviving laundering concerns.

A cryptocurrency wallet, which was linked to last year’s Infini exploit, has been active again after six months of silence. Blockchain trading firm says that the wallet bought millions of dollars’ worth of Ethereum during the recent price drop and then sent it to the private mixing service, which is supposed to hide where the money goes. 

According to the data shared by Lookonchain, the wallet bought 6,316 ETH and paid an average price of roughly $2,109 per coin. Immediately, the entire balance was moved to Tornado Cash, and this movement was confirmed by the two security companies, PeckShield and CertiK. Researchers noted that this address showed activity after 200 days. 

What is Tornado Cash 

Basically, Tornado Cash is a cash mixer. It works by mixing many users’ cryptocurrencies before redistributing them, which makes it very difficult to trace the source. This helps protect the user’s money from hacking and exploits and avoids being tracked by exchanges or enforcement agencies. 

The analyst says that this wallet has shown an unusual pattern of trading, accumulating ETH at the near local market lows and selling the portion near strong highs. The past activity includes, after the Infini attack, the stolen funds being turned into 17,696 ETH in February 2025. In July 2025, 5000 ETH was sent to Tornado Cash. In February 2026, 6,316 ETH were bought at the recent dip at $2,109. 

Infini suffered its major security failure in Feb 2025. At that time, attackers gained control over the internal permissions, which allowed them to move about $49.5 million in digital assets. The funds were quickly swapped across tokens and converted into ETH. This was distributed across many wallets. This strategy complicated the recovery attempts.

Right now, there is no sign that the newly moved ETH has been frozen, and the investigators are still watching for where the money might surface next. Once assets pass through mixers, the recovery usually becomes much harder.  

Highlighted Crypto News:

Coinglass Report Highlights Discrepancies Across Perp DEXs, Raising Debate