Pando Rings Hacker Moves $9M in ETH via Tornado Cash After 4-Year Dormancy
The long-dormant Pando Rings attacker has resumed activity, laundering 4,000 ETH through Tornado Cash.
The long-dormant Pando Rings attacker has resumed activity, laundering 4,000 ETH through Tornado Cash. Ethereum (ETH) is trading at $2,242.93, down 0.3% since this brief published. This is an original TLT brief based on reporting by AMBCrypto, with live market data added, as of Tue, 03 Nov 2026 07:00:04 UTC.
This development highlights the ongoing challenge of tracking and recovering stolen crypto funds, particularly when sophisticated anonymizing tools like Tornado Cash are used. It also underscores the persistent threat of legacy hacks and their potential to impact market sentiment.
- 4,000 ETH ($9M) moved by Pando Rings hacker after 4 years
- Funds routed through Tornado Cash to obscure transaction trail
- Ethereum market cap remains at $274.93B despite the development
- Drift Protocol Hacker Moves $61M in Ethereum to Tornado Cash
- Drift Exploiter Moves $109M in ETH Through Tornado Cash
- Cysic Bridge Exploiter Moves $744K in ETH and BNB to Tornado Cash
- Pando Rings Hacker Acquires $16.72M in Ethereum Amid Market Downturn
- Pando Rings Hacker Moves $9M in ETH via Tornado Cash After 4-Year Dormancy — this brief
The hacker behind the 2019 Pando Rings exploit has reemerged after four years of inactivity, moving 4,000 ETH ($9 million) through Tornado Cash. This development was first reported by AMBCrypto and is supported by on-chain data.
Tornado Cash, a decentralized privacy solution, allows users to obscure the transaction trail of their funds, making it difficult for investigators to trace the movement of stolen assets. The hacker's decision to use this tool indicates a strategic effort to enhance the anonymity of the funds.
The 
Ethereum network itself has not been directly impacted by this transaction, with ETH currently trading at $2,250.45, down 1.85% in the last 24 hours. However, the incident may contribute to broader market unease, as evidenced by the Fear & Greed Index sitting at 26, indicating a 'Fear' sentiment.
The Pando Rings exploit was one of several high-profile hacks that occurred in 2019, highlighting the persistent challenge of securing crypto assets. The hacker's decision to move the funds now, after such a long period, suggests a possible change in strategy or the identification of an opportune moment to liquidate the assets.
The total crypto market cap remains at $2.64 trillion, with 
Bitcoin also experiencing a 2.17% decline in the last 24 hours. The broader market downturn may be influenced by various factors, including regulatory developments and macroeconomic conditions.
Since this brief published about 4 hours ago, Ethereum (ETH) has moved from $2,250.45 to $2,242.93 — -0.33%.
The chart plots ETH's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from TLT's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.
At today's peer-to-peer rate, 1 ETH ≈ ₦3.09M (about $2,242.93), down 1.8% over 24 hours. The naira itself trades about 2.4% above the official rate on the P2P market, so a Nigerian buyer's effective cost differs from the headline dollar price.
Live market data
Current prices for the asset in this story — live, source-stamped, updated every 15 minutes.
Figures and sectors in this story, checked live against on-chain aggregators · November 3, 2026.
TLT reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
Pando Rings Hacker Moves $9M in ETH via Tornado Cash After 4 — questions & answers
What is Tornado Cash and why is it significant?
Tornado Cash is a decentralized privacy solution that allows users to obscure transaction trails, making it difficult to trace the movement of funds.
How much ETH was moved by the hacker?
The hacker moved 4,000 ETH, which is approximately $9 million.
Why is this development important?
This development is important because it highlights the challenges of tracking and recovering stolen crypto funds, particularly when anonymizing tools are used.
How much is 1 Ethereum worth in naira today?
About ₦3.09M at the live peer-to-peer (P2P) USDT rate, which is what Nigerians typically trade at — equivalent to roughly $2,242.93. The naira price moves with both ETH's US-dollar price and the USDT/NGN rate; use our Ethereum in naira page for any amount.
Has Ethereum's price moved since this brief was published?
ETH is down 0.33% since this brief first published — trading at $2,242.93 now versus $2,250.45 at publication. TLT re-checks this figure against CoinGecko and Binance every 15 minutes.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from AMBCrypto. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.