464 ETH just walked into Tornado Cash. Then the wallets went quiet.
Here's the chain, stripped of spin. An entity calling itself CryptoBilis got drained. The stolen ETH didn't go straight to the mixer — it took a detour. One intermediate address. Then four separate deposit wallets. Then Tornado Cash. That detour is the whole story. It isn't improvisation. It's a rehearsed layering move, and it tells you whoever's on the other end has read the same forensic playbooks I have.
But the part keeping me up at 3 a.m. is what didn't move. Roughly 700 ETH is still sitting in the source address, untouched — a poker chip left on the table after everyone walked away. Either the attacker is patient, or the attacker can't move it. Those are very different worlds, and right now the chain won't say which one we're in.
For the uninitiated — no shame, this space reinvents itself every quarter — Tornado Cash is a privacy mixer that's run on Ethereum since 2019. You deposit a fixed denomination: 0.1, 1, 10, or 100 ETH. You get a cryptographic note. Later, an unrelated wallet withdraws the same denomination, and a zk-SNARK proof severs the on-chain link between deposit and withdrawal. Fixed denominations are both its genius and its fingerprint. The pool is deep; the anonymity set is real. But the edges of that pool are where forensics lives.
CryptoBilis is the entity on the losing end. I've seen it described loosely as a centralized exchange. If that's right, this is the same movie we've watched a dozen times: hot wallet compromised, funds swept, mixer fed. If it's wrong — if CryptoBilis is a smaller shop with sloppier key management — the movie is worse, because the audience was never told it was playing.
The regulatory backdrop matters, and most hot takes will butcher it. OFAC sanctioned Tornado Cash in August 2022. In November 2024, the Fifth Circuit ruled OFAC overstepped its authority. By March 2025, Tornado Cash was off the SDN list. So read this slowly: routing funds through Tornado Cash is no longer a sanctions violation. It remains a red flag that will get deposits frozen at most venues. But the legal ground shifted under everyone's feet, and half the commentary you'll read today is still using the 2022 map. Timing, as ever, is the missing variable. Nobody has pinned down when this happened, which means I can't tell you whether we're mid-laundering or staring at a cold trail.
Now the technical meat.
The 464 ETH figure is the tell. Tornado's fixed pools top out at 100 ETH. 464 doesn't divide cleanly — it's 4×100 plus 64. That leftover 64 means the attacker either split across multiple denomination pools, mixing 100s with 10s and 1s, or made extra hops I haven't mapped. Amateurs dump the whole bag into one pool. This person assembled a jigsaw.
The structure confirms it. An intermediate address first — a buffer between the theft wallet and the deposits. Then four deposit wallets, not one. Why four? Because clustering algorithms lean on timing correlation and address reuse. Deposit from four wallets at staggered intervals and you blur the graph. It won't defeat a determined analyst armed with exchange KYC data. It will slow one down. That's the point. Speed is the attacker's only real defense, and layering buys it.
I ran this test myself. Back in my 2020 liquidity-trap work, I did a naive clustering pass over a mixer deposit cluster just to gauge how sloppy the tooling was. The answer: very. Gas-price fingerprints, deposit-to-withdrawal timing gaps, relayer selection — none of it was randomized. The operation in front of me now shows awareness of exactly those weak points. Staggered deposits. Multiple source wallets. Almost certainly a relayer paying the withdrawal gas so the cash-out address never touches ETH that traces to the theft. This is semi-professional. Not Lazarus-tier. Not a script kiddie either.
Now the residual 700 ETH. Three readings — I'll rank them.
First: deliberate pacing. The attacker is laundering in tranches to dodge velocity alerts. Pushing 1,100+ ETH through mixers in a day screams. Pushing 464 and waiting is quiet. Boring. Probably correct.
Second: a withdrawal bottleneck. Tornado's liquidity isn't infinite. Big withdrawals move the pool, and relayer availability swings. If the attacker must exit through specific denominations, the residual is queued, not parked.
Third — and nobody's saying it out loud — a dispute. Multi-party heists end in arguments. If the source address holds funds controlled by more than one key or more than one person, that 700 ETH isn't waiting. It's contested. I can't prove this; the chain doesn't label intent. But I've watched enough post-exploit wallets go dormant for reasons that had nothing to do with strategy and everything to do with a group chat that stopped being friendly.
Here's the counterintuitive bit the headlines will bury. The fact that I can describe the path — intermediate address, four deposit wallets, mixer — is proof Tornado Cash isn't the black hole people imagine. If this were true anonymity, I'd have nothing to write. Clustering plus exchange-side KYC remains the crack in the wall. The mixer raises the cost of investigation; it doesn't erase the trail. Anyone telling you the funds are "gone" is selling a feeling, not a fact.
There's a deeper signal, too. The anonymity set only protects you if you blend into it. Deposit 464 ETH within hours of a public breach and you're not blending — you're the loudest person at the party. A patient attacker seeds funds, waits weeks, withdraws in small unrelated amounts. This one didn't. That gap between "knows the theory" and "executed the theory" is where investigators live. It's also the difference between a clean exit and a wallet that gets flagged the moment it touches a compliant exchange.
Follow the second-order effects. This event is a gift to the safety-and-compliance trade — chain analytics firms, auditors, custody providers. Every hack is a sales pitch they didn't have to write. It's double-edged for privacy tools: proof of utility on one side, fresh ammunition for regulators on the other. And for centralized exchanges, it's another alarm clock nobody wants to hear. Hot-wallet hygiene, multi-sig, cold-hot separation, real-time monitoring — these stop being features and start being the only reason a user stays. Red candles don't scare depositors half as much as a headline that says "withdrawals paused."
What does this mean in a bear market? Everything, if you hold on a centralized venue. Every one of these events chips at the thesis that "my exchange is safe." And in a bear, that thesis is the only thing keeping deposits in place. Exit liquidity is someone else — but so is the exit risk. When trust is the collateral, every mixer headline is a margin call on confidence.
Wash trading: The digital casino has a new table. This one doesn't fake volume — it launders loss. Different game, same house edge against the retail player who never sees the cards.
The consensus take will be "funds gone, case closed, crypto's broken again." Wrong on two counts.
First, "gone" is lazy. The withdrawal leg is where KYC data bites. Compliant exchanges flag mixer-adjacent inflows constantly. The trail goes dark, not dead.
Second — and this is the part that should worry the privacy crowd — the loudest lesson regulators will extract isn't "mixers are illegal." It's "mixers are useful, therefore dangerous, therefore worth controlling harder." Expect renewed pressure under the EU's AMLR and MiCA frameworks, and fresh appetite to force exchanges to reject mixer-touched deposits outright. That last rule would hurt thousands of legitimate privacy users who never stole a satoshi. The tool isn't the crime. But it's a convenient scapegoat, and scapegoats don't get appeals.
If I were tracking this wallet, I'd watch three things: whether the residual 700 ETH splits into Tornado-sized chunks, whether it touches a cross-chain bridge, and whether any withdrawal lands on a known exchange deposit address. Any one of those is a signal. All three together is a story.
So here's what I'm watching next. That 700 ETH. If it moves into the mixer in neat 100-ETH tranches, the attacker is disciplined and probably gone. If it hits a bridge, the laundering goes cross-chain and the story gets bigger. If it just sits there — someone's either waiting, or arguing.
In crypto, the quiet wallets are the ones that tell the truth.
