Hacker used Tornado Cash; XRP activation blocked RLUSD withdrawal

If you’re very interested in this incident, I really hope you read this piece.

There are a few noteworthy points.

1. The hacker pulled funds from Tornado Cash the day before the hack and did a dry run in advance.
(= Going forward, it likely makes economic sense for exchanges to assign dedicated staff or a team to monitor “Tornado Cash-funded wallets.” The expected value is more likely high than low.)

2. The hacker proceeded in the order of Binance XRP Network, RLUSD withdrawal -> XRP withdrawal, but due to Ripple’s nature, an account won’t be activated unless XRP is sent first, so the RLUSD withdrawal failed. (= Even hackers make mistakes.)