A hacker has laundered approximately $5.5 million in Ethereum through Tornado Cash and Circle's Cross-Chain Transfer Protocol (CCTP), according to blockchain investigator ZachXBT. Between July 2 and 3, the hacker withdrew around 3,200 ETH from Tornado Cash, funds linked to two private key leak incidents. The assets were then moved across chains using Circle's CCTP and converted into USDC, which was distributed to seven deposit addresses on the Arbitrum network. ZachXBT highlighted the use of mixing tools and cross-chain infrastructure to obscure the transaction trail, with the assets still in circulation.