A wallet tied to the Aztec Private Rollup Bridge exploit sent another 300 ETH to Tornado Cash, pushing its total deposits to the mixer to 500 ETH. The bridge lost about $2.165 million in a June exploit that Aztec says involved a discontinued legacy product. The transfers follow a wider pattern of exploiters routing stolen funds through Tornado Cash after past DeFi hacks.
A wallet linked to the Aztec Private Rollup Bridge exploit deposited 300 ETH, worth approximately $572,000, into Tornado Cash on Aug. 8, blockchain security firm PeckShield reported. On-chain data in the firm's alert showed three separate deposits of 100 ETH each.
The new transfers raised the wallet's cumulative Tornado Cash deposits to 500 ETH, worth roughly $953,000 at press time. PeckShield did not identify who controls the address, and there was no immediate sign that any of the funds had been recovered.
Private Rollup Bridge lost $2.165 million in June
A June exploit of Aztec's Private Rollup Bridge cost approximately $2.165 million. The stolen assets reportedly included 1,158 ETH, 150,000 DAI and 0.47 renBTC. Aztec said the affected bridge was a legacy product unconnected to its current network or its AZTEC token.
That incident followed a separate attack on Aztec Connect, another discontinued part of the project's earlier infrastructure. An attacker drained around $2.1 million from Aztec Connect's old RollupProcessor contract on June 14, a system that had been discontinued about three years earlier.
Security researchers said the exploit relied on a mismatch between transactions covered by a zero-knowledge proof and those processed during settlement, letting the attacker create unbacked balances and withdraw assets. Aztec Labs could not pause or upgrade the deprecated contract because it had surrendered its administrative keys.
Part of a wider mixer trend
The two Aztec incidents were part of a broader rise in crypto security breaches in June. DefiLlama recorded $74.9 million in losses across 29 exploits that month. That tally included two separate Aztec incidents valued at approximately $2.1 million each.
Other exploiters have also turned to Tornado Cash. In July, a wallet tied to the Drift Protocol exploit deposited 23,095 ETH, then worth around $44.4 million, into the mixer after months of inactivity.
A wallet linked to the Radiant Capital attack previously transferred 2,834 ETH into Tornado Cash. The Cork Protocol exploiter routed approximately 4,520 ETH through the service.
Tornado Cash still under scrutiny
The U.S. Treasury removed Tornado Cash from its sanctions list in March 2025, after a federal appeals court ruled the agency exceeded its authority by sanctioning immutable smart contracts. Yet U.S. authorities have continued to examine the use of crypto mixers in money laundering, sanctions evasion and cybercrime cases. Treasury officials have also maintained concerns about their use by North Korea-linked hacking groups.
Source: crypto.news
Trading involves risk.
Risk Disclaimer
