On August 7, blockchain security firm PeckShield reported that an address linked to the Unizen hack transferred 865.4 Ethereum (approximately $2.16 or €1.98 million) to Tornado Cash, a well-known mixing service. This marks the first movement of the stolen funds since March 8.
Transfer of stolen funds
Around the time of the hack, Unizen announced that users who lost $750,000/€687,300 or less would be refunded starting on March 11. After 151 days of inactivity, the stolen funds, which included the Maker Protocol stablecoin Dai, first began leaving the hacker’s wallet on August 7.
At 04:12 UTC, an initial transfer of 500,000 DAI was made, followed by a further outflow of 1,679,859 DAI to an unknown wallet (0x8660…84d7). Then, starting at 04:14, the hacker began converting the 2,179,859 DAI to 863.67 Ethereum. Starting at 05:35, this ETH was sent to Tornado Cash in 26 separate transactions.
Measures and refunds
On March 11, Unizen announced that CEO Sean Noga had transferred personal funds to the company to facilitate the repayment of funds lost to victims of the hack, amounting to $2.16/€1.98 million. The company explained that the repayments would be made in Tether. For users who lost more than $750,000/€687,300 in the hack, it was stated that they would be processed on a case-by-case basis.
Following the hack, Unizen Chief Technology Officer Martin Granström said on X that the company is working with third-party security firms and law enforcement agencies to identify the hacker. He also announced that an incident report would be shared and that more investment in security would be made in the future.
Source: https://newsbit.nl/unizen-hack-gestolen-ethereum-naar-tornado-cash-gestuurd/
