The hacker behind February’s massive Infini breach is back on-chain, seizing the opportunity as Ethereum prices rally.
On July 17, 2025, the attacker’s wallet showed its first signs of life in months, transferring a total of 4,770 ETH – worth roughly $16 million – across two addresses. Blockchain security firm PeckShieldAlert flagged that 3,000 ETH had been funneled through Tornado Cash, the sanctioned crypto mixer frequently used to erase transaction trails. Meanwhile, another 1,770 ETH was swapped for approximately $5.9 million in DAI stablecoin, marking a direct liquidation of part of their stolen assets.
#PeckShieldAlert #Infini Exploiter has transferred 4,770 $ETH (worth ~$16M) to 2 addresses
The address 0x7142…fa41 has laundered 3K $ETH via #tornadocash
The address 0x762d…F9FB has swapped 1,770 $ETH for ~5.9M $DAI pic.twitter.com/usIdcvYRWM— PeckShieldAlert (@PeckShieldAlert) July 17, 2025
The timing aligns with Ethereum’s latest price surge. After stealing $49.5 million in USDC from Infini earlier this year, the hacker converted the stablecoins into 17,696 ETH at an average price of $2,798. With ETH now trading above $3,400, their stash has ballooned to around $59 million – netting them over $10 million in gains.
So far, only a small portion has been moved, suggesting the attacker may be testing exit strategies before offloading larger sums. The wallet still holds about $38 million worth of ETH.
Infini’s recovery prospects continue to dim. After the exploit, the crypto neobank attempted to negotiate with the hacker, offering a 20% bounty and immunity from legal action in exchange for the stolen funds, but those efforts went unanswered.
Investigations later revealed that the breach stemmed from admin rights retained by a developer involved in the platform’s smart contract setup, ultimately enabling the attacker to drain its assets. The Infini hack remains one of the largest crypto exploits this year, alongside high-profile incidents such as the Bybit hack, which saw $1.4 million stolen in February.
With fresh transfers underway and laundering routes like Tornado Cash in play, the stolen funds are likely out of reach – cementing the Infini breach as yet another harsh lesson for DeFi security.
If you want to read more news articles like this, visit DeFi Planet and follow us on Twitter, LinkedIn, Facebook, Instagram, and CoinMarketCap Community.
“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
