X100 Exploiter Moves 821 ETH to Tornado Cash After Flash Loan Attack

The perpetrator behind the recent exploit of the X100 protocol has begun laundering stolen funds through the decentralized mixer Tornado Cash. According to on-chain data monitored by security firm PeckShieldAlert, the attacker’s address transferred 821.2 ETH, valued at approximately $1.89 million, into the privacy-focused protocol on October 26, 2024. This movement follows a devastating security breach that occurred just two days prior, significantly impacting the project's liquidity and market valuation.

Details of the X100 Governance Exploit

The security incident took place on October 24, 2024, when the X100 platform was targeted in a sophisticated flash loan governance attack. By manipulating the protocol's voting mechanisms using borrowed liquidity, the attacker was able to drain assets totaling roughly $1.75 million. Flash loan attacks involve borrowing large sums of capital without collateral to manipulate decentralized finance (DeFi) smart contracts within a single transaction block.

The aftermath of the breach led to a severe collapse in the project's native ecosystem:

• The native X token experienced a price crash of over 96% within a 24-hour window.
• Liquidity pools associated with the project were depleted, leaving investors with significant slippage.
• On-chain analysts tracked the movement of the illicitly gained Ethereum (ETH) as it remained stagnant for 48 hours before the latest transfer.

Asset Laundering and Regulatory Implications

The use of Tornado Cash by the X100 exploiter highlights the ongoing challenges faced by law enforcement and cybersecurity firms in tracking digital assets. By depositing the 821.2 ETH into the mixer, the attacker aims to break the deterministic link between the source of the stolen funds and the final withdrawal address.

"The X100 attacker's address has deposited 821.2 ETH into Tornado Cash", reported PeckShield, confirming that the malicious actor is actively attempting to obfuscate the transaction trail.

Tornado Cash remains a controversial tool in the DeFi space, often cited in reports regarding the movement of funds from high-profile decentralized finance exploits.

In conclusion, the movement of funds to Tornado Cash represents a critical phase in the X100 exploit cycle, complicating recovery efforts for the affected protocol. As the X token remains in a state of volatility following its 96% decline, the incident serves as a stark reminder of the inherent risks associated with governance vulnerabilities in the DeFi ecosystem.