CertiKAlert reported today, Oct 26, 2026 at 13:42 UTC, that the x100global attacker wallet 0x8296…42e5 is sending funds to Tornado Cash, with 300 ETH (about $690k) sent so far (post).

CertiKAlert reported today, Oct 26, 2026 at 13:42 UTC, that the x100global attacker wallet 0x8296…42e5 is sending funds to Tornado Cash, with 300 ETH (about $690k) sent so far (post).

That wallet is one of five split addresses flagged after the Oct 24 governance hijack of @x100global for about $4.75M-$4.848M in USDT, which NoxosIntel said was swapped to about 2,022 ETH (post). NoxosIntel gave this address 422 ETH, plus 400 ETH each on four others. GoPlusSecurity and others describe the root cause as a flash-loan Senate takeover letting the attacker force the treasury to sell X into its own thin pool (post).

On-chain now the address is drained to about 0.0008 ETH. DeBank history shows repeated 0.1 ETH Tornado deposits today from 0x8296…42e5, consistent with laundering in small Tornado tranches rather than one 300 ETH transfer, and no other balance remains.

I could not independently sum 300 ETH from the indexed history rows returned, only the pattern and empty balance. CertiK is the source for the 300 ETH figure.