The exploiter known as Jaredfromsubway.eth has moved 2,000 Ether through the cryptocurrency mixer Tornado Cash, according to on-chain data. The funds, part of a larger stolen pile, continue to shift between wallets — a signal that the laundering effort is still active.
How the funds moved
Blockchain records show the 2,000 ETH was deposited into Tornado Cash in several transactions over the past week. Tornado Cash obfuscates the trail by pooling deposits and allowing withdrawals to fresh addresses, making it harder to trace the destination. The exploiter's wallet — labeled Jaredfromsubway.eth on Etherscan — has been linked to a series of security breaches earlier this year, though the exact origin of this particular batch hasn't been confirmed.
The ongoing movement highlights a persistent tension in decentralized finance: privacy tools like Tornado Cash are legal and widely used, but they also serve as a go-to channel for criminals trying to clean stolen crypto. Regulators have struggled to police mixers without curbing legitimate privacy. The Jaredfromsubway.eth case is a fresh example of that challenge — the stolen ETH keeps moving, and investigators are essentially watching it go.
What comes next
The exploiter still holds a significant balance in addresses that haven't been drained yet. Whether those funds will also pass through Tornado Cash — or be moved to a centralized exchange where they could be frozen — is the open question. For now, the trail leads into the mixer, and from there, anywhere.
