Aztec Connect exploit (2026-06-14) follow-up: attacker wallet deposits 1,255.8 ETH into Tornado Cash on 2026-10-19

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Project or site name: Aztec Connect
  • Incident date: 2026-10-19
  • Reported: 2026-10-20
  • Last updated: 2026-10-20

Follow-up to the earlier blockint.ai report on the 2026-06-14 Aztec Connect exploit (https://blockint.ai/c3?report=378c3de8-a977-46bd-8b00-e13c7a45357f). On 2026-10-19 the attacker wallet moved its remaining funds into Tornado Cash for the first time since the exploit. Address (Ethereum): - 0x0F18D8b44a740272f0be4d08338d2b165b7EdD17 (Aztec Connect attacker wallet, per Aztec Labs) What happened: After no outgoing transactions since the exploit on 2026-06-14, 0x0F18D8b44a740272f0be4d08338d2b165b7EdD17 redeemed its yvLUSD, yvDAI and yvWETH Yearn vault tokens and swapped the LUSD, wstETH, DAI and…

Other addresses in this report: 0x0f18d8b44a740272f0be4d08338d2b165b7edd17

Report a crypto scam · How to report a crypto scam