Which hacks moved funds to ETH?

TLDR

Two notable exploits this week moved stolen funds onto Ethereum (ETH): Unleash Protocol (~$3.9M) and the Flow execution?layer incident (~$3.9M).

1. Unleash Protocol: assets bridged to Ethereum and 1,337.1 ETH deposited via Tornado Cash, per a report.
2. Flow network exploit: attacker moved funds off Flow to Ethereum, then laundered via ThorChain and Chainflip, per a security update.

Deep Dive

1. Unleash Protocol

An exploit on Unleash Protocol led to about $3.9 million in losses, with the attacker bridging the haul to Ethereum and later depositing 1,337.1 ETH to Tornado Cash to obscure flows, per a detailed coverage. Tornado Cash is commonly used to break traceability of funds after bridging to a high?liquidity chain like Ethereum.

• Governance failure granted control over contracts, enabling withdrawals and cross?chain transfers to Ethereum before mixing.
• The Tornado Cash deposit indicates intent to complicate forensic tracking post?bridge.

2. Flow Execution-Layer Exploit

The Flow Foundation confirmed an execution?layer vulnerability where about $3.9M was moved off the Flow network, routed to Ethereum, and then swapped and relayed via ThorChain and Chainflip, according to a security update and ecosystem posts. Investigators flagged addresses and coordinated with issuers and exchanges to freeze assets where possible.

• Path included multiple bridges (e.g., deBridge, Relay, Stargate) before consolidation on Ethereum and onward swaps.
• Subsequent cross?chain flows complicate seizure; stablecoin freezes and exchange coordination are key mitigations.

Conclusion

This weeks exploits funneled funds onto Ethereum because it offers deep liquidity, broad bridge coverage, and access to mixing tools. If your goal is tracking or risk mitigation, focus on bridge entries into Ethereum and early mixer deposits; those transitions often mark the point where recovery becomes materially harder.