ETH exploit hacker moves $117M dormant stash

TLDR

A hacker from the 2023 Mixin Network exploit has reactivated after about two years and is now moving and selling a large stash of stolen Ether (ETH).

1. A wallet tied to the Mixin exploit has begun selling roughly 59,854 ETH, around 117 million dollars, after years of inactivity.
2. Part of the funds has been mixed through Tornado Cash and partly sold via fresh wallets, adding focused but not system?wide selling pressure on ETH.
3. On-chain trackers are watching for further transfers, and exchanges may flag related addresses, so this is mainly a security and sentiment story to monitor, not a structural ETH change.

Deep Dive

1. Dormant Mixin Exploit Funds Wake Up

A wallet linked to the 2023 Mixin Network hack that stole about 200 million dollars in crypto has started moving its ETH again after roughly two years of dormancy.

According to on-chain analysis summarized by U.Today, the hacker is now selling about 59,854 ETH, estimated near 117 million dollars, from that exploit stash. The original haul included 57,849 ETH, 891 BTC and tens of millions in stablecoins converted to DAI, showing the scale of the breach and remaining holdings.

A BSCNews summary of Lookonchain data highlights that this activity follows a long period of silence and is clearly tied to the earlier Mixin exploit rather than a new hack.

2. How The Hacker Is Moving And Selling ETH

Tracking by Lookonchain, reported in both U.Today and a BSCNews alert, shows the hacker sent 2,005 ETH, about 3.85 million dollars, to mixer protocol Tornado Cash, then routed another 2,087 ETH to three new wallets which sold at roughly 1,933 dollars per ETH, even at a small loss to spot.

BSCNews notes that the hacker still controls around 57,849 ETH and 891 BTC, so only a portion of the stash has been actively sold so far. This pattern of splitting funds across new addresses and using a mixer is standard laundering behavior aimed at obscuring the trail.

3. What To Watch Next

1. Further large transfers from the known exploit addresses into Tornado Cash or new wallets, which would signal continued unwinding of the stash.
2. Exchange responses, such as flagging or freezing deposits from tagged addresses, which can slow cashing out but rarely recover all funds.
3. Broader ETH sentiment, since renewed selling from old hacks can weigh on confidence, especially when combined with existing ETF outflows and leveraged unwinds.

Confidence: high because multiple independent reports match the same on-chain transfers and amounts.

Conclusion

This episode is a reminder that hacked funds can sit dormant for years before being laundered, and their eventual movement can briefly add to selling pressure and negative headlines. For most ETH holders, the key takeaway is not a fundamental change to Ethereum itself, but the ongoing importance of tracking large exploit wallets, mixer usage and how quickly venues react when long silent attackers move again.