Mixin Hacker Moves $127.5M ETH After 2-Year Dormancy, Signals Liquidation Phase

After remaining inactive for two years, the Mixin exchange hacker—responsible for a $200 million theft—has reportedly initiated movement of a massive ETH holding. Chain analytics firm Lookonchain flagged suspicious activity involving 59,854 Ethereum tokens from the compromised wallet, suggesting the perpetrator is now proceeding with asset liquidation following the lengthy silence.

The illicit funds are being transferred through Tornado Cash, a privacy-focused mixing protocol designed to obscure transaction trails. In the initial phase of this liquidation strategy, approximately 2,005 ETH (roughly $4.3 million at current $2.13K valuation) was funneled through the mixing service. Subsequently, three freshly created wallets received 2,087 ETH derived from the Tornado Cash outputs and began systematic disposal at trading rates around $2,000-$2,100 per token.

What This Means for the Market

The reactivation of this dormant hacker wallet carries significant implications for Ethereum price stability. The movement of 59,854 ETH—now valued at approximately $127.5 million—represents a concerning supply injection into the market. Such large-scale unauthorized holdings entering circulation through mixing protocols typically signal preparation for off-exchange liquidation, potentially exerting downward pressure on ETH valuations.

The Monitoring Advantage

This case underscores the importance of continuous on-chain surveillance by platforms like Lookonchain. The ability to track illicit fund movements in real-time enables the community and exchange operators to anticipate potential market disruptions and take protective measures. As hacker activities become increasingly sophisticated, leveraging mixing services and layered wallets, vigilant monitoring remains the primary defense mechanism against unexpected liquidation events.