A dramatic new incident has shaken the cryptocurrency world: a user with accounts on multiple exchanges lost nearly $6.7 million worth of digital assets after an attack exposed by on-chain analytics firm Specter. Reports indicate the attackers were able to withdraw significant funds from both Kraken and Coinbase, highlighting growing concerns over crypto security.
Details of the stolen assets
According to data published by Specter, the perpetrators withdrew 1,554 Ethereum from the victim’s Kraken account. On the day of the transfer, this amounted to about $3.3 million. In addition, the attackers also managed to steal 10.5 Bitcoin from the same account, increasing the total loss significantly.
Losses were not limited to Kraken. From the victim’s Coinbase account, the attackers transferred 34.1 cbBTC (Coinbase Wrapped Bitcoin), which corresponded to approximately $2.6 million. The choice to target popular assets like ETH, BTC, and cbBTC drove considerable attention to the incident, bringing the overall loss to the headline $6.7 million figure.
Blockchain analytics company Specter emphasized that the attackers withdrew 1,554 ETH and 10.5 Bitcoin from the victim’s Kraken account, and 34.1 cbBTC from Coinbase, with the total loss reaching $6.7 million.
Tornado Cash obscures stolen funds
After the theft, the attackers quickly concealed their tracks by transferring the stolen crypto to Tornado Cash, a notorious crypto mixer. Specter reported that nearly $5.3 million was funneled through this service, shielding transaction origins from outside observers.
Glossary: Tornado Cash is a decentralized crypto mixer operating on the Ethereum network. It helps users disguise transaction histories, often hampering traceability. While it can serve privacy needs, Tornado Cash is commonly cited in illegal activities like money laundering, leading to sanctions in many countries.
Tornado Cash has long faced criticism for its role in facilitating money laundering. Large-scale transfers through such mixers make blockchain detection much harder, and researchers continue to monitor suspicious activity routed through these platforms.
Physical attacks on crypto investors rising
The incident report notes that this attack may have involved not only cyber intrusion, but also the risk of physical violence. The storage of digital assets directly in user wallets rather than at banks has introduced new vulnerabilities and even led to a wave of physical threats against crypto owners worldwide.
Cases are increasing where investors are threatened for the passwords to their wallets or forced to unlock their secured devices under duress. The latest spike in crypto valuations has further exposed high-net-worth individuals to such direct risks.
Neither Kraken nor Coinbase has issued an official statement on the attack thus far. Nonetheless, both exchanges continue to underline the importance of security steps like two-factor authentication, withdrawal limits, and robust account notifications.
Blockchain analytics enable the detailed tracing of stolen tokens from one address to another. However, the use of mixers like Tornado Cash greatly complicates efforts to follow these digital trails, making the job much harder for investigators.
The case serves as a sharp reminder that security concerns in the crypto sector remain as urgent as ever heading into 2026. Even though blockchain technology promises transparency, the safety of individual investors and their digital holdings remains a central issue of debate and concern.
