- Radiant Capital hacker moved more than 5,400 Ethereum (ETH) tokens
- Blockchain security firm PeckShield reported the exploiter moved ETH to the crypto tumbler Tornado Cash
- Radiant Capital suffered a $50 million security breach in October 2024
Blockchain security firm PeckShield reported that the actor behind the 2024 Radiant Capital hack moved 5,411.8 Ethereum (ETH) tokens.
PeckShield posted an alert on October 31, 2025, noting a large transfer of ETH into Tornado Cash.
This transfer is the latest movement of funds tied to the Radiant Capital exploit, occurring more than a year after the protocol was compromised.
At the time of writing, Ethereum (ETH) was trading around $3,832, down 1.5% over the past 24 hours and 3.2% for the week.
Radiant Hacker Moves 5,411 ETH
The lending protocol Radiant Capital suffered a major security breach on October 16, 2024, when approximately $51 million of user funds were drained from pools on Arbitrum and BNB Chain.
Following the incident, cybersecurity researchers linked the attacker to groups associated with the North Korean regime.
Radiant sought assistance from law enforcement agencies, including the FBI.
Over the following year, the stolen funds showed multiple transfers indicating attempts to launder proceeds.
On October 31, 2025, PeckShield issued an alert that the exploiter deposited 5,411.8 ETH—worth roughly $20.7 million—into Tornado Cash.
The transfer consisted of a series of deposits in amounts of 0.1 ETH, 1 ETH, 10 ETH, and 100 ETH.
On-chain data shows the hacker address 0x0fa503e4…2e748ef9e routed coins to the mixing service.
Radiant ETH on the Move: Not the First Time
The movement of over $20 million in Ether from the attacker’s address to Tornado Cash follows previous transfers.
On September 11, 2025, the suspected attacker moved 5,933 ETH (about $26.7 million at the time), again through a mixer.
Earlier, on August 12, 2025, the hacker swapped 3,091 ETH for DAI stablecoin—approximately $13.26 million—diversifying the holdings.
The actor also deposited 2,834.6 ETH to mixing services via the Arbitrum bridge, splitting the large theft into smaller transactions.
In early October, blockchain security firm Elliptic revealed that hackers linked to North Korea had already stolen more than $2 billion in crypto in 2025.
Elliptic described that figure as the largest annual total on record for North Korea–linked hackers, noting the group has amassed over $6 billion in stolen crypto overall.
“Most hacks in 2025 were driven by social engineering attacks, where hackers tricked or manipulated individuals to gain access to digital assets,” the firm said.