On-chain data shows that the attacker drained 1,577 ETH from Raft, then sent 1,570 ETH to the copy address – destroying most of the stolen assets and leaving only 7 ETH for themselves. The hacker’s address received 18 ETH via cryptocurrency mixing service Tornado Cash before the attack, blockchain data on Arkham shows, potentially funding transactions.