{"id":3513,"date":"2022-04-20T07:08:30","date_gmt":"2022-04-20T07:08:30","guid":{"rendered":"https:\/\/www.cryptoheretostay.com\/?p=3513"},"modified":"2022-04-20T07:08:30","modified_gmt":"2022-04-20T07:08:30","slug":"axie-infinity-ronin-bridge-hacker-has-already-moved-38293-eth-114-8-million","status":"publish","type":"post","link":"https:\/\/cryptoheretostay.com\/?p=3513","title":{"rendered":"Axie Infinity Ronin Bridge Hacker has already moved 38,293 ETH ($114.8 million)"},"content":{"rendered":"<p> <script type=\"text\/javascript\">\r\namzn_assoc_placement = \"adunit0\";\r\namzn_assoc_tracking_id = \"totafreearti-20\";\r\namzn_assoc_ad_mode = \"search\";\r\namzn_assoc_ad_type = \"smart\";\r\namzn_assoc_marketplace = \"amazon\";\r\namzn_assoc_region = \"US\";\r\namzn_assoc_default_search_phrase = \"crypto\";\r\namzn_assoc_default_category = \"All\";\r\namzn_assoc_search_bar = \"false\";\r\namzn_assoc_title = \"\";\r\namzn_assoc_rows =\"1\";\r\n<\/script>\r\n<script src=\"\/\/z-na.amazon-adsystem.com\/widgets\/onejs?MarketPlace=US\"><\/script><br \/>\n<\/p>\n<p>Almost a month ago, Ronin Network, the side-chain built to scale Axie Infinity was exploited by hackers who made off with over $615 million worth of ETH.<\/p>\n<p>The hackers seem to have cashed in 28,164 ETH out of the 173,000 ETH stolen in the Ronin Bridge attack, with a current market value of $86,128,384.73.<\/p>\n<p>The attackers had initially moved over 2000 ETH ($6 million) 2 weeks ago, and now the hackers are on the move again.<\/p>\n<p>The image below, taken from Reddit, shows a list of outgoing transactions related to the wallets involved in the exploit.<\/p>\n<p>Outgoing transactions from wallets associated with the Axie Infinity Ronin Bridge attack<\/p>\n<p>Reddit user ThatGuy222666 has been keeping track of the main wallet since the Ronin Bridge was exploited. It looks like the attackers are using multiple wallets to deposit the ETH into Tornado Cash, a crypto mixer that allows users to disguise their digital trail on the Ethereum blockchain.<\/p>\n<p>According to the image below, it takes the hackers 4-6 hours to empty each new wallet of 100 ETH.<\/p>\n<p>It takes the attackers 4-6 hours to empty each wallet of 100 ETH \u2013 image taken from Reddit post.<\/p>\n<p>There are outliers, such as this wallet, to which the attacker sent 10,000 ETH over a day ago.<\/p>\n<p>The biggest ETH move made by the hackers at the time.<\/p>\n<p>Whoever the exploiter is, the quantity of ETH transferred is constantly increasing.<\/p>\n<p><strong>\u201cThe most baffling part of the whole situation to me, is that 327 different wallets have actually sent this person small quantities of ETH in the hope he shares the wealth.\u201d the Reddit user said.<\/strong><\/p>\n<p>Wallets that have sent ETH to the hacker<\/p>\n<p><strong>Reddit user ThatGuy222666 continued to say: \u201cI have never been so intrigued with a random person on the internet, This whole situation blows me away.\u201d<\/strong><\/p>\n<p>The Reddit user finished off by saying:<\/p>\n<p><strong>\u201cI plan on continuing to track where all this ETH goes purely out of curiosity, the absolute magnitude of this exploit is too much for my little brain to comprehend.\u201d<\/strong><\/p>\n<p>The Reddit poster believes that the attack was carried out by a single person who may be moving the funds slowly to avoid detection.<\/p>\n<p>According to the Reddit post, the address \u201cwas on a US watchlist before the exploit\u201d and was \u201clinked to North Korea.\u201d However the savvy user still believes the attack was carried out by 1-2 users.<\/p>\n<h2>Get an Edge on the Crypto Market \ud83d\udc47<\/h2>\n<p>Become a member of CryptoSlate Edge and access our exclusive Discord community, more exclusive content and analysis.<\/p>\n<p>  <strong>On-chain analysis<\/strong><\/p>\n<p>  <strong>Price snapshots<\/strong><\/p>\n<p>  <strong>More context<\/strong><\/p>\n<p> Join now for $19\/month Explore all benefits<br \/>\n<br \/><script type=\"text\/javascript\">\r\namzn_assoc_placement = \"adunit0\";\r\namzn_assoc_tracking_id = \"totafreearti-20\";\r\namzn_assoc_ad_mode = \"search\";\r\namzn_assoc_ad_type = \"smart\";\r\namzn_assoc_marketplace = \"amazon\";\r\namzn_assoc_region = \"US\";\r\namzn_assoc_default_search_phrase = \"bitcoin\";\r\namzn_assoc_default_category = \"All\";\r\namzn_assoc_search_bar = \"false\";\r\namzn_assoc_title = \"\";\r\namzn_assoc_rows =\"1\";\r\n<\/script>\r\n<script src=\"\/\/z-na.amazon-adsystem.com\/widgets\/onejs?MarketPlace=US\"><\/script><br \/>\n<br \/><a href=\"https:\/\/cryptoslate.com\/axie-infinity-ronin-bridge-hacker-has-already-moved-38293-eth-114-8-million\/\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Almost a month ago, Ronin Network, the side-chain built to scale Axie Infinity was exploited by hackers who made off with over $615 million worth of ETH. The hackers seem to have cashed in 28,164 ETH out of the 173,000 ETH stolen in the Ronin Bridge attack, with a current market value of $86,128,384.73. The [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3514,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[3],"tags":[],"class_list":["post-3513","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ethereum-news"],"_links":{"self":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/3513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3513"}],"version-history":[{"count":1,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/3513\/revisions"}],"predecessor-version":[{"id":3515,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/posts\/3513\/revisions\/3515"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=\/wp\/v2\/media\/3514"}],"wp:attachment":[{"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoheretostay.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}