{"id":43537,"date":"2026-05-13T07:04:08","date_gmt":"2026-05-13T07:04:08","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=43537"},"modified":"2026-05-13T07:04:08","modified_gmt":"2026-05-13T07:04:08","slug":"hacker-actively-laundering-stolen-crypto-after-exploiting-liquidity-provider-for-6700000-peckshield","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=43537","title":{"rendered":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"600\" src=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/03\/Insane-Strength-altcoin.jpg?resize=1024,600\" class=\"webfeedsFeaturedVisual wp-post-image\" alt=\"\" \/><\/p>\n<p>A hacker has started laundering digital assets that were part of the $6.7 million theft from the liquidity provider TrustedVolumes, says cybersecurity firm PeckShield.<\/p>\n<p>PeckShield <a href=\"https:\/\/x.com\/PeckShieldAlert\/status\/2053726382061195737\" rel=\"noopener\" target=\"_blank\">says<\/a> that new data shows the hacker has started moving hundreds of thousands of dollars worth of Ethereum (<a href=\"https:\/\/dailyhodl.com\/currencies\/ethereum\/\" rel=\"noopener\" target=\"_blank\">ETH<\/a>).<\/p>\n<p><em>\u201cThe TrustedVolumes exploiter has laundered $278,000 in stolen funds so far: they deposited 10.2 ETH ($23,600) to TornadoCash and laundered 110 ETH ($250,000) via THORChain to BTC; they also attempted to deposit 0.5 ETH to Railgun but changed their mind and sent it back. TrustedVolumes was exploited for ~$6.7 million on May 7th.\u201d <\/em><\/p>\n<p>TrustedVolumes <a href=\"https:\/\/x.com\/trustedvolumes\/status\/2052235435292910005\" rel=\"noopener\" target=\"_blank\">says<\/a> that it is willing to negotiate a resolution with the hacker. The firm also lists three wallet addresses with two holding approximately $3 million and one $700,000 worth of the stolen crypto assets.<\/p>\n<p><em>\u201cWe were recently exploited\u2026<\/em><\/p>\n<p><em>We are open to constructive communication regarding a bug bounty and a mutually acceptable resolution.\u201d <\/em><\/p>\n<p>Blockchain security firm QuillAudits <a href=\"https:\/\/www.quillaudits.com\/blog\/hack-analysis\/trustedvolumes-rfq-hack\" rel=\"noopener\" target=\"_blank\">says<\/a> that the hacker was able to drain millions in a single transaction by exploiting a design flaw in the platform\u2019s custom order-settlement system.<\/p>\n<p><em>\u201cTrustedVolumes operates as a 1inch market maker and resolver, providing on-chain liquidity through a custom Request-for-Quote (RFQ) proxy\u2026 <\/em><\/p>\n<p><em>In an RFQ model, a maker pre-signs orders, quoting a specific price for a specific token pair. A taker presents that signed quote to the settlement contract, which verifies the signature and executes the swap atomically.The system relies on three guarantees working in concert, the maker must have authorized who can sign orders on its behalf, each signed order must be filled only once (replay protection), and the token source for the fill must be the authenticated maker\u2019s own inventory, not an arbitrary third-party address. <\/em><\/p>\n<p><em>In the TrustedVolumes implementation, all three guarantees failed simultaneously, and the attacker exploited them in a single composed transaction.\u201d<\/em><\/p>\n<p><em><span>Follow us on <a href=\"https:\/\/x.com\/TheDailyHodl\" target=\"_blank\" rel=\"noopener\">X<\/a>, <a href=\"https:\/\/www.facebook.com\/thedailyhodl\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a> and <a href=\"https:\/\/t.me\/thedailyhodl\" target=\"_blank\" rel=\"noopener\">Telegram<\/a><\/span><\/em><br \/>\n<br \/>\n<em><span>Don&#8217;t Miss a Beat \u2013 <a href=\"https:\/\/dailyhodl.com\/join-the-daily-hodl-email-list\/\" target=\"_blank\" rel=\"noopener\">Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em><br \/>\n<br \/>\n<em><span>Surf <a href=\"https:\/\/dailyhodl.com\/daily-hodl-mix\">The Daily Hodl Mix<\/a><\/span><\/em><br \/>\n<\/p>\n<div class=\"hideinamp\">\n<div class=\"dianomi_context\" data-dianomi-context-id=\"736\"><\/div>\n<p>&amp;nbsp<\/p>\n<h6>Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n<p><span><em>Generated Image: Midjourney<\/em><\/span><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/2026\/05\/13\/hacker-actively-laundering-stolen-crypto-after-exploiting-liquidity-provider-for-6700000-peckshield\/\">Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/\">The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>A hacker has started laundering digital assets that were part of the $6.7 million theft from the liquidity provider TrustedVolumes, says cybersecurity firm PeckShield. PeckShield says that new data shows the hacker has started moving hundreds of thousands of dollars worth of Ethereum (ETH). \u201cThe TrustedVolumes exploiter has laundered $278,000 in stolen funds so far: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":43538,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[],"tags":[],"class_list":["post-43537","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=43537\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"A hacker has started laundering digital assets that were part of the $6.7 million theft from the liquidity provider TrustedVolumes, says cybersecurity firm PeckShield. PeckShield says that new data shows the hacker has started moving hundreds of thousands of dollars worth of Ethereum (ETH). \u201cThe TrustedVolumes exploiter has laundered $278,000 in stolen funds so far: [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=43537\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-13T07:04:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/03\/Insane-Strength-altcoin.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield\",\"datePublished\":\"2026-05-13T07:04:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537\"},\"wordCount\":439,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Insane-Strength-altcoin-22a2g1.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537\",\"name\":\"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Insane-Strength-altcoin-22a2g1.jpg\",\"datePublished\":\"2026-05-13T07:04:08+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=43537\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Insane-Strength-altcoin-22a2g1.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Insane-Strength-altcoin-22a2g1.jpg\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=43537#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=43537","og_locale":"en_US","og_type":"article","og_title":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag","og_description":"A hacker has started laundering digital assets that were part of the $6.7 million theft from the liquidity provider TrustedVolumes, says cybersecurity firm PeckShield. PeckShield says that new data shows the hacker has started moving hundreds of thousands of dollars worth of Ethereum (ETH). \u201cThe TrustedVolumes exploiter has laundered $278,000 in stolen funds so far: [&hellip;]","og_url":"https:\/\/cryptomag.finance\/?p=43537","og_site_name":"Cryptomag","article_published_time":"2026-05-13T07:04:08+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/03\/Insane-Strength-altcoin.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=43537#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=43537"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield","datePublished":"2026-05-13T07:04:08+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=43537"},"wordCount":439,"image":{"@id":"https:\/\/cryptomag.finance\/?p=43537#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Insane-Strength-altcoin-22a2g1.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=43537","url":"https:\/\/cryptomag.finance\/?p=43537","name":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=43537#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=43537#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Insane-Strength-altcoin-22a2g1.jpg","datePublished":"2026-05-13T07:04:08+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=43537#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=43537"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=43537#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Insane-Strength-altcoin-22a2g1.jpg","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Insane-Strength-altcoin-22a2g1.jpg","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=43537#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Hacker Actively Laundering Stolen Crypto After Exploiting Liquidity Provider for $6,700,000: PeckShield"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/43537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=43537"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/43537\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/43538"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=43537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=43537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=43537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}