$13 million worth of ETH transferred again! The laundering routes of on-chain hacker funds are continuously exposed

According to on-chain monitoring data, addresses related to the Balancer attack, in the past 9 hours, transferred about 5,609 Ethereum tokens, worth approximately $13 million, to the cross-chain protocol THORChain.

Looking back at the incident background, in November 2025, Balancer suffered a theft of more than $116 million. The incident shares similar funding characteristics with the Aave-related attack; in both cases, security analysis has pointed to a suspected hacker organization of the Lazarus Group.

In addition, the related funds have recently frequently switched their routes through mixing tools, further increasing the difficulty of tracking.

From on-chain behavior, these high-frequency cross-chain transfers often indicate that the funds are being “split and laundered” across multiple layers to reduce tracking risk and increase anonymity.

In the crypto world, technology can both create efficiency and be used to counter tracking and security systems.

The market is always evolving, and the power struggle between security and attacks has never stopped.

What is truly worth being wary of isn’t a single incident, but the continuous upgrading and systematic evolution of attack methods.

In the complex on-chain world, understanding the direction of fund flows is more important than just watching the price. 🚀