FTX hacker switches strategy after THORSwap suspends service

Crypto.news – The individual behind the 2022 attack on FTX has altered their strategy for laundering their stolen into .

On-chain analyst Lookonchain noticed on Oct. 6 that the person behind last year’s FTX hack had stopped using THORChain for moving their stolen assets and had begun to exploit the Threshold Network instead.

Lookonchain’s data indicated that the attacker converted over 3,000 Ether (ETH), valued at $4.9 million, into tBTC via the Threshold network. Since then, per Lookonchain, the attacker has successfully converted about 75,636 ETH, valued at $124 million, into Bitcoin, while another 109,485 ETH, valued at approximately $180 million, remains in their wallet.

Threshold is a decentralized conduit between the Bitcoin (BTC) and Ethereum blockchains that allows users to convert their holdings into an ERC-20 token, tBTC, pegged 1:1 with Bitcoin.

According to reports, the attacker had previously preferred THORSwap, but it entered maintenance mode on Oct. 6 in order to stop any additional potential illegal activities.

The decision reportedly came after extensive internal discussions and advice from legal and law enforcement entities, and the platform will remain on hold until a robust safety solution can be established.

Before THORChain went into maintenance, the FTX exploiter had reportedly moved at least $38 million worth of ETH through it and the privacy-protecting platform, Railgun.

Originally, damage estimates from the hack were thought to be up to $400 million, but FTX reassessed the situation and reported losses closer to $323 million.

The identity of the culprit behind the attack is still shrouded in uncertainty, but speculation within the crypto community pointed fingers at the controversial FTX founder Sam Bankman-Fried, who is currently on trial for wire fraud and conspiracy to commit money laundering.

While Bankman-Fried has adamantly refuted claims of his involvement in the theft, the significant movement of stolen funds coinciding with his trial has reignited speculation of an insider’s involvement.

This article was originally published on Crypto.news