An institutional entity is suspected to have lost ~$2.84M to DPRK-linked SquidSquad on October 8, 2026 on BSC. Yesterday (Oct 20), the attacker deposited 1111.2 ETH into Tornado Cash and withdrew to three addresses. Tornado withdrawal addresses: 0xb8b25f535a6e51d0b18c48941d791c7e83559d2b 0x35c72e26f6888b4cba8668c6cfa4143599680bfe 0x8e4a232ac8a05d1f4cfe4458a96a581ceeb7e848 From there, all funds were bridged from Ethereum to Tron via USDT0 and consolidated at: TEvUsnwXvprdvB7eNGiqh6rDiMqFiC8TBU TVxzjnx3GPDTciiuagXPaUbU5f5y13Voux Both consolidation addresses have exposure to previously attributed DPRK addresses. Within minutes, the funds moved through intermediary addresses to Chinese OTCs, likely to evade any potential Tether freeze. Victim address: 0x579be84d2a0f7bcfc34b4b3883153adec84ff153 Theft address: 0x049b1ecce5e2fb254821bc9dc3ae98c5a6eb7e80