Mixin Exploiter Moves $3.85M in Stolen ETH to Tornado Cash

Edgen Crypto

·Feb 13 2026, 19:31

Share to

Share to

Copy link

Key Takeaways

A wallet linked to the 2023 Mixin exploit reactivated on February 13, 2026, after two years of dormancy, transferring millions in stolen Ethereum to a mixing service. This move signals a potential liquidation event that could introduce sell pressure on ETH.

Exploiter Reactivates: A wallet dormant for two years moved 2,005 ETH worth $3.85 million to the Tornado Cash mixer.
Market Impact: A separate batch of 2,087 ETH was sold at $1,933, below the market price of $1,971, indicating an urgent liquidation.
Future Risk: The attacker's total known holdings are far larger, with 57,849 ETH and 891 BTC still un-moved, posing a risk of future market pressure.

Exploiter Funnels $3.85M in Stolen ETH After Two-Year Dormancy

On February 13, 2026, a wallet associated with the 2023 Mixin exploit reactivated after two years of inactivity, transferring 2,005 ETH valued at approximately $3.85 million. According to on-chain analysis from Lookonchain, the funds were sent directly to the cryptocurrency mixer Tornado Cash. This service is frequently used to obscure the trail of digital assets, often as a precursor to liquidating stolen funds on open markets.

Stolen Funds Sold at Discount, Hinting at Broader Sell-Off

The attacker's activity extended to distributing 2,087 ETH across three newly created wallets. These funds were subsequently sold at an average price of $1,933 per ETH when the prevailing market price for Ethereum was $1,971. Selling at a discount suggests an urgency to cash out and could indicate the beginning of a larger liquidation strategy. The exploiter's total known holdings from the attack remain substantial, with links to 57,849 ETH and 891 BTC, representing a significant overhang of potential sell pressure on the market.