Summer.fi exploit funds moving on-chain: exploiter swapped 1.35M DAI to ETH and routed through Tornado Cash, with 4.67M DAI and 50 ETH still in tracked wallets.
Security & Exploits ·
Activity linked to the Summer.fi exploit has resumed on-chain. On July 6, a wallet received 6.017 million DAI connected to the breach, according to tracking data. Of that amount, 1.35 million DAI was converted to ETH through Uniswap, then moved through an intermediary address before being routed into Tornado Cash, a privacy mixer. The remaining 4.67 million DAI sits in the original wallet, alongside 50 ETH held in the second address.
The movement indicates the exploiter may be attempting to obscure the origin and flow of stolen funds. The use of a decentralized exchange followed by a privacy protocol suggests deliberate steps to break the transaction trail. On-chain observers are tracking both addresses involved in the transfers.
It remains unclear whether additional funds from the broader exploit remain unmoved elsewhere, or if further withdrawals and conversions are planned. The 4.67 million DAI still in the original wallet and the 50 ETH in the secondary address could be mobilized at any time.