Summer Fi exploiter moves majority of $6M stolen DAI through Tornado Cash; ~$565K in ETH remains across two wallets.
Security & Exploits ·
On July 6, the attacker behind the Summer Fi exploit received 6.017M DAI and has since begun converting and transferring the stolen funds through Tornado Cash, a privacy mixing service. The attacker's activity indicates an effort to obscure the movement of the majority of the extracted capital. Two wallets currently hold the remaining balance: one contains 11.3 ETH valued near $21.63K, while a second holds 282.9 ETH worth approximately $543.47K, for a combined remaining amount of roughly $565K across both addresses.
The mechanics of the exploit and the timing of when the attacker gained access to these funds remain unspecified in available reports. The split across two separate wallets and the ongoing use of Tornado Cash suggest the attacker may be attempting to fragment the trail of the remaining assets to hinder tracking. Whether law enforcement or recovery teams have identified additional movements through privacy mixers, or when the initial exploit itself occurred, has not been publicly clarified.