Coinbase Scammer Moves Stolen Funds Through Tornado Cash Again
A scammer behind a social engineering campaign that stole over $300 million from Coinbase users is moving funds again, highlighting ongoing laundering and security risks in crypto.
Onchain investigators have tracked the movement of stolen funds, with some being converted to Ethereum (ETH) and sent to Tornado Cash. The same route was taken three weeks ago when a $2 million ETH conversion occurred.
The scammers allegedly impersonated Coinbase customer support to trick users into revealing credentials or transferring assets. Despite tens of millions remaining in associated wallets, the threat actor appears to be actively moving funds.
This case has an unusually brazen history, with the threat actor previously embedding custom messages directly into transactions sent towards ZachXBT's wallet while tracking efforts were underway.