Aztec Exploiter Moves Another 300 ETH to Tornado Cash, Total Reaches 500 ETH
On August 8, 2026, blockchain security firm PeckShield reported that the wallet linked to the Aztec Network Private Rollup Bridge exploit has transferred another 300 ETH, worth approximately $572,100, into the privacy mixer Tornado Cash. This latest deposit brings the attacker’s total to 500 ETH, according to the firm’s on-chain analysis.
Background of the Aztec Network Attack
Aztec Network, a privacy-focused layer-2 solution that enables confidential transactions on Ethereum, suffered a significant exploit in June 2026. The attack targeted its Private Rollup Bridge, a critical component that allows users to move assets between Ethereum and Aztec’s encrypted environment. The breach resulted in approximately $2.165 million in cryptocurrency losses, a figure confirmed by both the project team and independent security researchers.
Also read: Ethereum Holds Above $1,900: Can ETH Finally Reach $3,000?
The identity of the attacker remains unknown, and no arrests have been made. Following the incident, Aztec Network paused bridge operations and launched an internal investigation, but no official update on recovery efforts has been published since late July.
Why Tornado Cash Complicates Fund Tracing
Tornado Cash is a decentralized privacy protocol that breaks the on-chain link between the sender and receiver addresses. By pooling deposits and allowing withdrawals from a shared pool, it effectively obfuscates the flow of funds. This makes it a favored tool for hackers looking to launder stolen assets, despite previous sanctions against the protocol by the U.S. Office of Foreign Assets Control (OFAC) in 2022.
Also read: Ethereum Surges 27% After Tom Lee’s BitMine Acquires 9,946 ETH in Single Transaction
Security experts note that while Tornado Cash does not make funds completely untraceable, it significantly increases the time and resources needed for investigators to follow the money. In this case, the Aztec exploiter’s repeated deposits indicate a deliberate effort to launder the stolen ETH in tranches, a common pattern seen in other major crypto heists.
Implications for the Crypto Community
The ongoing movement of funds serves as a reminder of the persistent risks in the decentralized finance (DeFi) sector. Even as the industry matures, bridge protocols—which are frequent targets due to their large asset pools—remain vulnerable to sophisticated attacks.
For users, the incident underscores the importance of due diligence when interacting with new or complex protocols. It also highlights the ongoing tension between privacy tools and regulatory efforts to curb illicit finance. While privacy is a legitimate feature for many users, its misuse by malicious actors continues to draw scrutiny from regulators worldwide.
As of this writing, the Aztec exploiter has not moved the remaining funds, and it is unclear if further deposits will follow. The blockchain analytics community will be closely monitoring the wallet for any additional activity.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency markets are volatile and uncertain. Always conduct your own research before making any investment decisions.
