How much ETH was drained today?

TLDR

A compromised whale multisig today saw about $27.3 million in assets drained, with at least 4,100 ETH already moved by the attacker.

1. At least 4,100 ETH was laundered via Tornado Cash per a security alert from PeckShield.
2. The total loss is estimated near $27.3 million, and the attacker still controls the wallet, creating new risks as reported in a news summary.

Deep Dive

1. ETH Moved

The confirmed ETH component is what has already surfaced on chain. At least 4,100 ETH was sent through Tornado Cash, indicating quick obfuscation and partial monetization by the attacker, per the alert above.

Two implications follow.

1. The exact ETH share of the total $27.3 million drain is not fully disclosed yet; additional assets may be involved.
2. The 4,100 ETH figure is a floor, not a final tally, because more funds could be mixed later as the attacker cycles liquidity through privacy rails.

2. Total Loss and Residual Risk

Coverage today puts the overall drain near $27.3 million and notes a live tail risk. The attacker controls the compromised multisig, which still has a leveraged Aave position (roughly $25 million of ETH supplied against about $12.3 million DAI borrowed), according to the report above.

Why this matters now.

1. Control of a leveraged position can allow the attacker to alter collateral or trigger deleveraging under stress, which could force additional on-chain moves.
2. If broader market volatility persists, collateral management risk can amplify outcomes beyond the initial theft.
3. Monitoring the compromised wallets on-chain activity and the Aave position health becomes relevant for near-term flow risk.

Conclusion

Todays incident confirms at least 4,100 ETH already laundered, within a larger ~$27.3 million drain. The bigger concern is the attackers continuing control of a leveraged Aave position, which could create secondary flows if conditions deteriorate.