A hacker tied to 2022 financial voltage exploitation, a decentralized lending protocol developed on the fuse network, has moved a significant portion of stolen funds after months of inactive. Blockchain security firm Certik revealed on May 6 that the Hacker had moved 100 ether, worth about $ 182,783, through the Crypto Cash Crypto mix service.
According to Certik's investigation, the purse address used in the transaction has been inactive for 166 days, without movement since November. The address is linked to the original exploitation and may be monitored in the previous activity involving the hacker.
Our alert system is detected @Ttornadocash
Deposits of 100 ETH from 0xcf4823da7271fdedbe103500d8e197BDCA224B6D.Fund tracks ~ $ 4m financial voltage
Exploit the fuse back in March 2022.Stay vigilant! pic.twitter.com/eyqh1hbn3f
– Certik alert (@certikalert) May 6, 2025
Blockchain Security Firm also explained that the Hacker used Tornado Cash, which was punished by the US treasury in 2022 for facilitating money losses, to diminish blockchain transactions and prevent investigators from monitoring funding movements.
Voltage Finance Originally 2022 Exploitation
The voltage was hacked on March 31, 2022, and the hacker turned away at an estimated $ 4.67 million in digital tokens. It is reported that they took advantage of a weakness in a standard token, ERC677, through a built-in callback function. The operation allowed them to conduct a reentrancy attack to successfully deplete funds from lending platform to the platform.
In the initial stage of the attack, the culprit used a flash loan of 515 wrapped ether (weth) from a weth-wbtc pair to the finance voltage to start the exploit.
Finance Finance operates as a decentralized protocol that activates automatic token trading on the fuse network. The attacker took advantage of this infrastructure by manipulating smart platform contracts using wrapped tokens and flash loans.
OLA Finance, the multi-protocol network that supports voltage, has released a Post-mortem Two days after the incident that showed exploitation was specific to fuse deployment. Developers said similar attacks would not affect other lending networks under Ola's ecosystem.
In total, the attack stopped at 216,964.18 USDC, 507,216.68 busd, 200,000 FUSD, 550.45 wrapped Ether (Weth), 26.25 wrapped in Bitcoin (WBTC), and 1,240,000 fuse tokens.
“In the event of transactions, the attack avoids a flash loan by using funds that have been stolenOla said in his report.
Another exploitation struck in March 2025
The financial voltage is that again to a separate exploitation on March 18 this year, involving simple pools. At this time, unauthorized removal led to the robbery of $ 171,027.20 in USDCE and $ 151,085.87 in Weth. The platform has paused pool activities to stop the fund canal, and said it was “working with ease to identify the hacker.”
According to a medium of March 20 Report From the finances of voltage, the attack began when a second unknown party, referred to as attacker 2, withdrew from the ETH from the HTX crypto exchange. Attacker 2 transferred the stolen property to Attacker 1, who used the money to buy fuse tokens via Changenow, which was brought to the network by Layerzero.
From there, the stolen properties returned to Ethereum and moved through many purses and transactions. The funds were then passed from attack 1 to attack 3, which received additional funds through Simpleswap.
Attacker 3 deposited some of the tokens at the Kucoin Exchange, but replaced and removed the rest back to the first hacker to complete the laundering loop.
“Since your transactions go through Kucoin, we have begun cooperation to get to know you. We prefer to solve this situation peacefully. We have offered a large amount of $ 50k on the return of all funds,“Finance said voltage in hacker in x Post.
According to a recent report by blockchain security firm Immunefi, losses from crypto -related hacks have reached $ 1.74 billion to this year, surpassed $ 1.49 billion total recorded in all 2024. reported At the same time in 2024.
Cryptopolitan Academy: Wanna grow your money in 2025? Learn how to do this with Defi on our upcoming webclass. I -save your place
