Ledger attackers deposit 2,990 ETH into Tornado Cash, cross-chain to ZEC via NEAR Intents

Huo Xing Finance reports that, on October 11, Chain Detective Specter disclosed on their personal channel that, between October 9 and 10, hardware wallets associated with CryptoBilis—compromised via unauthorized hardware implants—deposited 2,990 ETH, valued at approximately $7.45 million, into Tornado Cash. Monitoring data shows that the attacker previously dispersed the funds to 14 addresses, then used NEAR Intents to cross-chain convert the assets to the ZEC network for further privacy-enhancing processing. Evidence of address linkage is evident during the fund transfer. Some withdrawal transactions reused the same wallet addresses previously used for deposits; other withdrawals were initiated by wallets linked to the address that paid the gas fees during the initial theft, aiding researchers in tracing the fund flow.