PeckShield monitoring cited by BlockBeats tracked a PandoRings exploit address moving 4,000 ETH into Tornado Cash after a series of Aave and token transactions.
Wallet movements
BlockBeats said the address deposited 16.8 million USDT into Aave, borrowed 5,000 ETH, then repaid the debt and withdrew collateral on Oct. 30. It later exchanged 16.7 million DAI for 7,548 ETH before depositing 4,000 ETH into Tornado Cash. The report also linked the address to the Pando Rings exploit disclosed in November 2022.
Source: BlockBeats English flash, published Nov. 2, 2026.