The Balancer exploiter woke up after 5 months of silence — and didn’t waste time. Within an hour, they moved around $2.55M, swapping about 1,100 ETH into BTC using THORChain.
After pulling off a ~$120M exploit months ago, staying quiet that long, then suddenly coming back like this… yeah, that’s calculated. Not random at all.
What’s really interesting is the method. Instead of moving funds directly, they’re breaking everything into smaller swaps and pushing it across chains. That kind of fragmentation makes tracking way harder. It’s basically like leaving breadcrumbs… but in 10 different directions at once.
This just highlights one thing again — cross-chain tools are powerful, but they also make laundering way more sophisticated. Once funds start bouncing between assets and networks, it becomes a nightmare for investigators.
This is is another reminder that even months later, exploits don’t just “end.” The money is still out there, and attackers are just waiting for the right moment to move.
DeFi really doesn’t sleep… and neither do the exploiters 😅