According to AMBCrypto, a hacker linked to the Pando Rings incident moved approximately 4,000 ETH through the Tornado Cash mixer shortly after four years had passed since the original breach. The movement indicates a continued effort by the individual to obscure the origin and flow of previously stolen funds.
Pando Rings refers to a past cyberattack that resulted in the theft of cryptocurrency assets. Four years later, the same actor or an associated party used Tornado Cash—a privacy-focused mixer—to route the 4,000 ETH, reducing traceability for investigators.
Use of Tornado Cash after such an extended period suggests a deliberate choice to further complicate law enforcement and forensic efforts. Investigators now face reduced avenues for following the money trail due to the use of a tool designed to obscure transaction metadata.
No additional details regarding timing beyond “after four years,” amounts beyond the stated 4,000 ETH, or specific actions by investigators are included. The source does not provide statements from officials, estimated detection timelines, or technical analysis of mixer usage.
