X100 Exploit Wallets Send 420 ETH to Tornado Cash
The illicit funds were processed through the mixer while over 1,600 ETH remain in linked holding wallets.
Updated on Oct. 26, 2026 in Financial Crime
Wallets associated with the X100 exploit recently transferred 420.8 ETH into the Tornado Cash privacy mixer. Investigators report that four separate holding wallets still contain approximately 1,602 ETH.
Why it matters
The movement of funds into a mixer complicates efforts to trace and recover assets stolen during the X100 exploit. While a portion has been laundered, the majority of the stolen cryptocurrency remains concentrated in linked accounts.
A total of 420.8 ETH was sent to the Tornado Cash mixer, while four distinct holding wallets currently retain approximately 1,602 ETH. The distributor wallet utilized for the deposits is now nearly empty.
The players
Tornado Cash
This decentralized, non-custodial privacy tool is frequently used to obfuscate the flow of funds on the Ethereum blockchain.
The details
The stolen assets are being managed through a series of transfers from the X100 exploit, with the mixer acting as a tool to obscure the audit trail. While the distributor wallet is effectively cleared, the substantial balance in the holding wallets indicates that the liquidation process is ongoing.
Timeline
October 26, 2026: Investigators published a report detailing the movement of exploited funds.
Legal Context
The movement of funds follows the pattern set by the 2022 U.S. Treasury sanctions against Tornado Cash. This activity highlights the ongoing challenges of regulating decentralized mixers within the broader international effort to curb financial cybercrime.
The use of mixers like Tornado Cash underscores the persistent risk for investors and platforms targeted by large-scale exploits. Residents and businesses holding digital assets should remain vigilant regarding suspicious account activity that may signal an ongoing liquidation of stolen goods.
The takeaway
Blockchain transparency allows for the real-time monitoring of stolen funds, yet decentralized mixers continue to provide a significant hurdle for recovery efforts. Users should utilize hardware wallets and heightened security protocols to mitigate the risk of falling victim to similar exploits.
Further reading
For additional context on how authorities track digital assets, visit the Financial Crime section.
