- Radiant Capital hackers moved over 5,400 Ethereum (ETH) tokens.
- Blockchain security company PeckShield said the attacker moved ETH to cryptocurrency mixer Tornado Cash.
- Radiant Capital suffered a $50 million security breach in October 2024.
Blockchain security company PeckShield reported that the attackers behind the 2024 Radiant Capital hack moved 5,400 Ethereum (ETH) tokens.
PeckShield shared an alert on October 31, 2025, noting that significant ETH transfers went to Tornado Cash.
The latest news from the Radiant Capital hack coin movement comes more than a year after the protocol was exploited.
Ethereum (ETH) is trading at around $3,832 at the time of writing, down 1.5% over the past 24 hours and down 3.2% over the past week.
Radiant hacker moved 5,411 ETH
Lending protocol Radiant Capital suffered a serious security breach on October 16, 2024, resulting in the exfiltration of $51 million in user funds from Arbitrum and BNB chain network pools.
After the incident, cybersecurity researchers linked the hackers to actors sponsored by the North Korean government.
Radiant also sought help from law enforcement agencies, including the FBI.
In the following years, several movements appeared that indicated money laundering attempts.
October 31, 2025, PeckShield warning The exploiter deposited 5,411.8 ETH, worth approximately $20.7 million, into Tornado Cash.
#PeckShieldAlert #Radiant Capital The exploiter deposited 5,411.8. $ETH (~$20.7M worth) #TornadoCash. pic.twitter.com/Ouqiue0soF
— PeckShieldAlert (@PeckShieldAlert) October 31, 2025
This transfer involved a series of deposits in denominations of 0.1 ETH, 1 ETH, 10 ETH and 100 ETH.
On-chain data is from the hacker’s address 0x0fa503e4… This shows 2e748ef9e sending coins to a mixing service.
Radiant’s ETH on the Move: Not the First Move
This move is not the first to transfer $20 million worth of Ether from a hacker’s address to Tornado Cash.
On September 11, 2025, the suspected attacker moved 5,933 ETH (worth approximately $26.7 million at the time).
Again, through a mixer. Prior to this, the hacker further diversified his holdings by exchanging 3,091 ETH for $13.26 million in DAI stablecoin on August 12, 2025.
Additionally, 2,834.6 ETH was deposited into the mixing service via the Arbitrum bridge as hackers broke up the large-scale heist into smaller batches.
In early October, blockchain security company Elliptic exposed North Korea-related hackers are said to have stolen more than $2 billion in cryptocurrency as of 2025.
This is “the largest annual total in history” for North Korea-linked hackers, Elliptic noted.
Specifically, these attackers have collectively stolen over $6 billion worth of cryptocurrency.
“The majority of hacks in 2025 were committed through social engineering attacks, where hackers trick or manipulate individuals to gain access to cryptocurrencies,” the company said.
