Nomad Bridge Hacker Transfers $35.2M in ETH to Tornado Cash

The recent transfer involving the Nomad Bridge exploiter and Tornado Cash underscores the ongoing conflict between privacy and regulation in the cryptocurrency sector. A Nomad Bridge exploiter-labeled address has transferred 14,500 Ether, valued at approximately $35.2 million, to Tornado Cash, a well-known cryptocurrency mixing service.

According to a post by PeckshieldAlert on X, funds associated with the August 2022 Nomad Bridge hack were moved on August 8. This transfer of 14,500 ETH follows another significant transaction on August 5, when 16,892 ETH was acquired using stolen funds linked to Nomad Bridge.

This hack exploited the Nomad crypto bridge, resulting in the loss of substantial funds. The August 5 purchase coincided with a dramatic drop in Ether’s value, plummeting over 20% from around $2,760 to $2,172 within 12 hours.

The Role of Tornado Cash

Tornado Cash is a decentralized, non-custodial privacy solution on the Ethereum blockchain that employs zero-knowledge proofs to sever the on-chain link between the source and destination of funds. While the service is designed to ensure privacy for legitimate users, it has also become a tool for cybercriminals to launder stolen cryptocurrencies.

The Nomad Bridge exploiter is not an isolated case. Recently, the hacker behind the Rain crypto exchange attack also began laundering stolen Ether through Tornado Cash. This trend highlights the dual-use nature of privacy tools in the cryptocurrency space.

Regulatory and Legal Responses

The persistent use of Tornado Cash by malicious actors has attracted regulatory attention. In 2022, the United States Treasury Department sanctioned Tornado Cash, leading to significant scrutiny and legal actions against its developers.

A report from the Federal Reserve Bank of New York on the impact of sanctions on Tornado Cash concluded that sanctions are generally effective even in decentralized finance. However, the report noted the “fragility” of the Ethereum network’s resistance to censorship and its cooperation with regulatory measures.

Despite sanctions, Tornado Cash remains operational and has seen increased usage. Meanwhile, the legal landscape has evolved, with developer Alexey Pertsev convicted of money laundering in the Netherlands in May.

In a related development, the US Department of Justice has charged Tornado Cash developers Roman Storm and Roman Semenov with conspiracy to commit money laundering, sanctions violations, and operating an unlicensed money-transmitting business.

As the cryptocurrency industry evolves, balancing privacy and security remains crucial. The use of mixing services like Tornado Cash by hackers not only jeopardizes the security of digital assets but also undermines the trust and stability of the broader cryptocurrency ecosystem.

source