The CryptoBilis attacker deposited another 1,200 ETH (~$2.78 million) into Tornado Cash on October 27, 18 days after the initial wallet theft. Using wallet 0x468b…2a4e, the attacker split 600.1 ETH into two new wallets that completed 12 parallel deposits of 100 ETH each between 14:24:59 and 14:27:23 UTC. Ledger confirmed on October 11 that an unauthorized hardware implant was present in a victim's device. The October 9 breach affected users who purchased Ledger hardware wallets through Southeast Asian reseller CryptoBilis. Bitquery estimates total losses at approximately $102 million across multiple chains.