The Ronin Network hackers have so far moved ~$32M of the $600M+ stolen funds, highlighting how the blockchain's ledger makes tracking money laundering easier
David Uberti / Wall Street Journal : Tweets: @jonsarlin , @alexhern , @peckshieldalert , @web3isgreat , @peckshieldalert , @peckshieldalert , and @anthony Tweets: Jon Sarlin / @jonsarlin : @Jihoz_Axie @smdiehl The Axie hacker has begun moving the stolen eth into Tornado Cash https://twitter.com/... Alex Hern / @alexhern : Bizarre take to conclude that sitting on $600m of stolen funds with near-zero risk of them ever being successfully seized, while apparently successfully laundering *$32m* in *a single week* shows laundering crypto is tricky https://www.wsj.com/... @peckshieldalert : #PeckShieldAlert ~1,775 $ETH (~$6m) from intermediary address 0xdf225c84a0eaeaaac20e6c1d369e94ee13b9d f2a into a new address 0x01a5d51057a82818d68d8f3b76ef0ac69a99a 911 @Ronin_Network #onthemove https://twitter.com/... @web3isgreat : The exploiters of Axie and its Ronin Network just moved another $10 million of the funds they stole late last month, this time to a crypto tumbler. Tumblers (aka “mixers") are a tool that make it difficult to trace stolen crypto. https://twitter.com/... https://en.wikipedia.org/... https://twitter.com/... @peckshieldalert : #PeckShieldAlert ~1,500 $ETH (~$5.3m) into @TornadoCash from @Ronin_Network exploiters intermediary address 0xdf225c84a0eaeaaac20e6c1d369e94ee13b9d f2a #onthemove https://twitter.com/... https://twitter.com/... @peckshieldalert : #PeckShieldAlert ~1,500 $ETH (~$5.3m) into 0xdf225c84a0eaeaaac20e6c1d369e94ee13b9d f2a from @Ronin_Network exploiters #onthemove https://etherscan.io/... https://twitter.com/... Anthony DeRosa / @anthony : Hacking crypto is the easy part, it's the laundering that gets tricky: https://www.wsj.com/...
Context & Ripple Effects
A week after Sky Mavis disclosed the Ronin Network breach — 173,600 ETH and 25.5M USDC off its Axie Infinity bridge, with RON down roughly 20% — on-chain trackers led by PeckShield are watching the stolen ETH move into Tornado Cash. The WSJ's framing cuts both ways: only ~$32M has been laundered so far, but that sum moved in a single week, which Alex Hern argues shows how little sitting still protects a thief when seizure risk is near zero.
The cash-out end of this pipeline was already mapped in prior coverage: criminals increasingly route profits through unlicensed exchanges and over-the-counter brokers, exactly the hop where forensic firms lose or regain the thread. The Ronin haul is now the largest live test of whether that exit layer can absorb a nine-figure theft.
First-order effects
- Sky Mavis and Ronin users are living with a crippled bridge and a devalued token while the attackers convert stolen ETH piecemeal through Tornado Cash, and PeckShield-style trackers publish every hop in near real time.
- The US government's attempt to freeze portions of the haul turns the remaining ~$570M into contested assets that the thieves must launder before they can spend.
Second-order effects
- Tornado Cash and similar mixers become the visible chokepoint: each large deposit by these wallets raises pressure on mixer usage generally and pushes future thieves toward the OTC-broker route the FT documented.
- Forensic firms gain their strongest sales pitch yet — a $600M theft tracked publicly in real time — making chain analytics a default procurement for exchanges and bridges facing regulators.
Third-order effects
- The Bitfinex precedent shows where this leads: stolen coins traced on-chain for years can anchor criminal cases and eventual recovery, meaning the ledger's transparency converts heists into long-running manhunts rather than clean getaways.
- If major thefts keep being traceable at the wallet level while exits stay narrow, enforcement shifts from chasing transactions to squeezing the off-ramp — unlicensed exchanges and brokers — as the systemic weak point.
The trend: Crypto theft is settling into a trace-then-launder arms race in which public ledgers hand investigators a permanent map while mixers and gray-market brokers remain the contested last mile.