On-chain traces of the Balancer hack show the $116 million exploit was a methodical operation likely planned for months; the exploiter used multiple Tornado Cash deposits of 0.1 Ether to obfuscate fund origins and avoid identification.