Blockchain security firm CertiK has identified deposits into the Tornado Cash mixer originating from a wallet address associated with a theft of approximately $1.58 million. The firm linked these transactions to a suspected private-key compromise reported around October 27, 2026.
CertiK stated that the incident appears to be a direct breach of a wallet or multisig setup rather than a vulnerability in a smart contract or protocol code. No specific tokens or victims have been publicly identified in connection with the stolen assets.
The firm noted that routing stolen funds through mixers like Tornado Cash is a recurring pattern in 2026. For instance, on October 20, an attacker involved in an incident with an Aztec rollup reportedly deposited $3 million into the same mixer.
CertiK’s Q3 2026 data indicates that private-key compromises represent a significant portion of smaller thefts. The firm continues to monitor these activities to assist exchanges and investigators in tracking assets that may resurface after being processed through mixers.
