On July 22, 2024, hackers who attacked the Indian exchange WazirX continued to process the tokens obtained in the previous attack. According to iChainfo ( search.ichainfo.com ), nearly two-thirds of the tokens on its address have been transferred and processed, and the remaining token amount is less than 5 million US dollars.
On-chain data shows that the hacker attack address 0x04b21735e93fa3f8df70e2da89e6922616891a88 transferred 15,290 bitcoins obtained from the attack to the 0x58d3b2fd2ce20a7149244d7e34d18b9b55448e7a address, and continued to use four addresses to process the large amount of tokens it obtained.
As of July 22, 124 of the 200 tokens obtained from the attack have been processed, mainly through decentralized exchanges such as Uniswap. After exchanging the tokens for ETH, the hacker transferred all the ETH to two new addresses 0x668399a6604c41d46c81430e4dff71443d44efe6 and 0x361384e2761150170d349924a28d965f0dd3f092.
Currently, the number of ETH in the three ETH aggregation addresses of WazirX hackers has reached 61,750, with a total amount of US$215 million.
Since WazirX has contacted hundreds of exchanges around the world to seek cooperation, it is difficult for hackers to cash out these stolen assets in a short period of time. The most likely method is to use mixing services such as Tornado Cash to mix the funds and then seek to cash them out. However, considering the volume of stolen funds, hackers will complete this process in a longer time window.
For the three ETH aggregation addresses of the hacker, search.ichainfo.com has set up monitoring on them within the platform, so that the changes in funds can be monitored at the first time.
By Auguste
Source: WazirX hacker continues token processing, 3 addresses accumulate 61750 ETH
