Penpie Hacker Launders Last Batch of the Stolen $27M Ether

Penpie hacker ignores negotiation calls, transferring all the stolen funds ($27 million) to Tornado Cash.

Hacker looking straight at you, whilst hacking.
Created by Kornelija Poderskytฤ— from DailyCoin
  • Penpie hacker has laundered all the funds stolen from the DeFi platform.
  • The hacker transferred the stolen ETH to Tornado Cash in batches.
  • Penpie has doubled down on its efforts to recover the funds.

The Penpie hacker has moved millions in Ether to Tornado Cash, effectively transferring all the stolen funds to the crypto mixer.

Sponsored

On September 3, the hacker exploited Penpieโ€™s security vulnerability, seizing control of usersโ€™ funds and stealing over $27 million in assets across the Arbitrum and Ethereum networks. Penpie attributed the attack to a reentrancy protection vulnerability in the Pendle staking market.

Hackerโ€™s Laundering Activity

According to blockchain security firm PeckShield, the hacker started moving the stolen funds on September 6, transferring 7,262 ETH ($17.4 million) to an intermediary address. The intermediary address laundered 5,600 ETH ($13.4 million) via Tornado Cash, followed by a series of other transfers to the crypto mixer, totaling 9,600 ETH ($23 million).

Barely two days later, on September 8, the hacker transferred the last 1,661 ETH to Tornado Cash, following the same transaction pattern used earlier. The funds were first deposited to the intermediary address before being distributed in small transfers of 100 ETH to the crypto mixer.

The hacker has since laundered all the stolen Ether despite Penpieโ€™s efforts to recover the funds. On September 4, the DeFi platform wrote to the malicious actor, saying it was willing to negotiate a bounty for the safe return of funds without legal action or identity revelation.

After the hacker ignored the plea, Penpie announced a $2.7 million bounty on September 6, 10% of the stolen funds. The DeFi platform said it would pay the bounty from the recovered funds.

Meanwhile, the Euler Finance exploiter congratulated the hacker for the โ€œgood job,โ€ noting that they โ€œdidnโ€™t see a hack like this for a while.โ€

Stay updated on how much hackers stole from the crypto industry in August:
Hackers Steal $313.86M in Crypto Across Over 10 Incidents in August

Read about WazirXโ€™s restructuring plan post-hack:
WazirXโ€™s Restructuring Sparks Fresh Crypto Contagion Fears

This article is for information purposes only and should not be considered trading or investment advice. Nothing herein shall be construed as financial, legal, or tax advice. Trading forex, cryptocurrencies, and CFDs pose a considerable risk of loss.

Author
Brian Danga

Brian Danga is a crypto reporter at DailyCoin covering breaking news. Brian has minor holdings in Bitcoin and Ethereum.

Read more