Multiple deposits were detected in the Tornado.Cash dating back to the $55 million phishing incident that occurred on August 21. attackers with addresses beginning with eth: 0x5d4 have exchanged minted DAI for ETH and dispersed funds.