Mixin Network hacker sleeps for two years and "sells 2,000 ETH"! Still holding 57,849 ETH and 891 BTC

Sleeping for two years, the Mixin hacker wallet suddenly awakens! Lookonchain’s latest tracking shows that this hacker, who previously stole about $200 million worth of assets, has begun small-scale selling of ETH through Tornado Cash. They still hold nearly 60,000 ETH and 891 BTC awaiting movement.
(Background recap: The biggest hacker attack of the year — Mixin stolen $200 million, with a maximum compensation of half, community questions insider theft…)
(Additional background: Claiming decentralized data but storing on the cloud? Public chain Mixin Network was hacked for $200 million, official response: maximum compensation of 50%…)

On September 23, 2023, the cryptocurrency project Mixin Network experienced a serious security incident. The project claimed to be a decentralized cross-chain transfer network, but its cloud database was breached, leading to a large amount of assets being stolen from the mainnet. According to on-chain tracking and official statistics at the time, the hacker stole approximately $200 million worth of assets, including 59,854 ETH, 891 BTC, and some USDT and other stablecoins.

Hacker dormant for two years, recently suddenly active

The hacker wallet remained almost inactive for two years after the incident, causing the market to gradually forget about this huge theft. However, according to tracking information released by on-chain analysis platform Lookonchain on February 13, 2026, this “Mixin hacker” appears to have ended their dormancy and is gradually selling the ETH they hold.

Lookonchain pointed out that the hacker still holds 59,854 ETH and 891 BTC. About 15 hours ago, the hacker transferred 2,005 ETH to the well-known mixer Tornado Cash to obfuscate the source of funds. Subsequently, three new wallets received a total of 2,087 ETH from Tornado Cash and quickly sold it when ETH was around $1,933.

Crypto communities believe this indicates the hacker is adopting a “small, batch, money-laundering and cashing out” strategy to avoid large-scale dumps that could cause market volatility. Currently, the hacker still has about 57,849 ETH and the full 891 BTC remaining untouched.

Note that #MixinHacker, who previously stole $200M, appears to be selling 59,854 $ETH($117M) after 2 years of inactivity!

15 hours ago, he sent 2,005 $ETH($3.85M) to #TornadoCash.

Soon after, 3 new wallets received 2,087 $ETH ($4.03M) from #TornadoCash and sold it at $1,933.… pic.twitter.com/8ujC2Berfz

— Lookonchain (@lookonchain) February 13, 2026

Market impact and insights

Although this movement is limited in scale, it has already attracted attention from the crypto community because the remaining assets are still worth over hundreds of millions of dollars. If the hacker continues to sell, it could put downward pressure on ETH prices, especially during volatile market periods where effects can be amplified. This case also serves as a reminder to investors: security of crypto assets is always a top priority, and decentralized projects must strengthen their infrastructure defenses.