Skip to content
Triple-A Attacker Moves $12.4M ETH to Tornado Cash Mixer

Triple-A Attacker Moves $12.4M ETH to Tornado Cash Mixer

First seen 11 Oct 2026, 00:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 11, 2026 at 01:33 UTC
  • •The attacker moved 4,970 ETH worth $12.4 million into Tornado Cash.
  • •Triple-A's treasury was breached via social engineering, but customer funds were unaffected.
  • •Cybersecurity experts are tracing the stolen assets to recover them.

The attacker responsible for the July breach of Triple-A's treasury has transferred 4,970 ETH, valued at approximately $12.4 million, into Tornado Cash on October 9, 2026. Blockchain security firm Salus reported that the funds were moved through multiple intermediary wallets before being deposited. The breach affected Triple-A's treasury assets, but customer funds remained secure. The attack was attributed to social engineering, and Triple-A has engaged cybersecurity experts to trace the stolen assets. Salus detailed the transaction process, noting that the attacker utilized a single wallet to consolidate funds from two streams before making the deposits. The company had previously reported unauthorized access on July 25, leading to a temporary service halt for security measures. The total loss from the breach was initially estimated at around $11.8 million.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-07-25
Unauthorized access detected
Triple-A reported unauthorized access to its treasury assets, prompting a temporary service halt.
Crypto.News
2026-10-09
Funds transferred to Tornado Cash
The attacker deposited 4,970 ETH into Tornado Cash, consolidating funds from two intermediary wallets.
Pluang

More articles in this cluster (3)

Following this threat?

Track Triple-A in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

What was the method of attack?
The breach was executed through social engineering tactics to gain unauthorized access.
How much was stolen in the breach?
The total estimated loss from the breach was approximately $11.8 million.
What actions is Triple-A taking?
Triple-A has engaged cybersecurity experts to trace the stolen assets and has improved its security measures.