Shibarium Bridge hacker foolishly chose not to accept the K9 bounty - it’s finally time to share the investigation we’ve been working on…🔎 this is juicy 🤤 The hacker made one stupid mistake and it completely unravelled their Tornado Cash laundering. 💰🌪️💵 That one mistake let me link: 🔗 The original hack wallets 🔗 Tornado withdrawal wallets 🔗 And dozens of KuCoin deposit accounts, likely used by money mules 👮🚨🚓 When I first noticed this transfer I couldn't believe what I was seeing. Jackpot! 🎰 I spent days tracing the blockchain: • 1000’s of transactions; 293 of interest • 111 wallets • 260 ETH laundered through Tornado Cash • 232.49 ETH ending up in KuCoin • 48 KuCoin deposits; 45 unique deposit addresses The entire obfuscation strategy fell apart because a hacker-linked wallet accidentally sent 0.0874 ETH to a “secret” withdrawal wallet that was supposed to be clean - completely destroying their privacy. Using MetaSleuth, I mapped the money flow: Original hacker wallet → “dumping” wallets → Tornado Cash → a web of post-mixer wallets → KuCoin deposit addresses. We quietly shared this with the @ShibariumNet team first so they could work with law enforcement before going public, in case any funds were still frozen or recoverable at KuCoin, but now the time has finally come where we can share this work publicly. @0xdefiturtle also tried working with @kucoincom fraud department but they told us they needed a law-enforcement case number before acting, despite having everything mapped and all the evidence handed to them on a silver platter. So now I’m publishing the on-chain evidence and methodology for the community, and for any victims who want to file their own reports. In this thread I’ll walk you through the full explanation of this analysis, step by step. Be sure to open up the @MetaSleuth dashboard (linked below) to see the graph of all the key addresses and transactions that I uncovered.