The attacker behind the Cork Protocol exploit, which resulted in a loss of approximately $12 million in May, has resurfaced. The exploiter laundered a significant portion of the stolen funds, totaling around $11 million, through the crypto mixing service Tornado Cash and made a surprising donation to the legal defense fund of Tornado Cash developers.
Key Takeaways
-
The Cork Protocol exploiter laundered approximately $11 million in stolen ETH via Tornado Cash.
-
A 10 ETH donation was made to the legal defense fund for Tornado Cash developers Alexey Pertsev and Roman Storm.
-
The exploit in May targeted the protocol's wstETH:weETH market, leveraging two advanced loopholes.
-
Cork Protocol is actively working on asset recovery, but the use of Tornado Cash complicates these efforts.
Exploiter Resurfaces and Launders Funds
On Wednesday, June 25, blockchain security firm PeckShield Alert identified renewed activity from wallet addresses linked to the Cork Protocol exploiters. This marked the first movement of funds since the May attack. The attacker initially sent 1,410 ETH, valued at approximately $3.2 million, to Tornado Cash. Shortly thereafter, an additional 3,110 ETH was transferred, bringing the total laundered amount to 4,520 ETH, equivalent to about $11 million at current prices.
Unexpected Donation to Tornado Cash Developers
In an unexpected turn, the exploiter also sent 10 ETH to a Juicebox campaign dedicated to raising funds for the legal defense of Tornado Cash developers, Alexey Pertsev and Roman Storm. The motivation behind this donation remains unclear, especially as the developers face legal charges related to the mixer's use by cybercriminals and sanctioned entities. Tornado Cash continues to be a preferred tool for obscuring the origins of stolen crypto assets.
The Cork Protocol Hack: A Recap
The Cork Protocol attack occurred on May 28 at approximately 11:39 UTC. The exploit specifically targeted the platform's wstETH:weETH market, leading to the theft of roughly 3,761 wrapped staked ETH (wstETH). According to the Cork team, the attacker exploited two sophisticated loopholes within the protocol's code and deployed a malicious hook to bypass standard validation checks. Following the draining of funds, the assets were swapped using the decentralized exchange aggregator 1inch, making them more difficult to trace and recover.
Ongoing Recovery Efforts
Cork Protocol has stated its continued commitment to recovering the stolen funds and has been working closely with security partners to address the fallout from the exploit. However, the recent transfer of funds to Tornado Cash is expected to significantly hinder these recovery efforts. The protocol is also focused on enhancing its security measures to prevent similar incidents in the future.
Sources
-
Cork Protocol exploiter launders stolen funds via Tornado Cash, donates 10 ETH to developers' legal fund, Crypto News.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.