TL;DR
- Armed attackers held crypto dealer Sillytuna captive, stealing $24 million in belongings.
- The attacker moved stolen funds throughout Ethereum, Arbitrum, Hyperliquid, and Bitcoin networks.
- Sillytuna supplied a ten% bounty for anybody recovering the stolen crypto funds.
A crypto dealer working beneath the username “Sillytuna” posted a collection of messages on X this week describing one of the crucial violent incidents in current crypto theft historical past. In line with the account, armed attackers held him captive, used weapons towards his fingers and ft, and threatened sexual assault earlier than forcing him handy over roughly $24 million in Aave Ethereum USDC (aEthUSDC). Regulation enforcement is reportedly concerned, although authorities haven’t publicly confirmed the small print of the alleged incident.
$24 million greenback theft of AUSD from 0x6fe0fab2164d8e0d03ad6a628e2af78624060322
Concerned violence, weapons, kidnapp and rape threats. Obvs police concerned.
Please go on to all those that hint such issues.
And now… positively out of crypto. ****ers.
Nonetheless have limbs,…
— Sillytuna (@sillytuna) March 4, 2026
The account, energetic on X since June 2008 and linked to a longtime NFT and gaming entrepreneur, described the bodily toll plainly: “Bruised, held off whereas I may, however can’t do this a lot with axes over your fingers and ft.” The posts circulated quickly throughout crypto circles, drawing consideration not solely to the dimensions of the alleged theft however to the extent of organized violence behind it. The dealer added that he’s now “positively out of crypto.”
Sillytuna posted a 10% restoration bounty on any funds that people or platforms handle to retrieve — a proposal prolonged even to individuals who participated within the assault. The bounty construction displays a realistic calculation frequent in giant crypto thefts: recovering a portion of the funds by means of monetary incentive usually proves extra lifelike than full restoration by means of regulation enforcement channels, notably when the attacker strikes rapidly to obscure the path.
Arkham Intelligence Tracked the Funds Throughout 4 Separate Networks
The attacker didn’t maintain the stolen belongings in place. Blockchain analytics platform Arkham Intelligence traced the motion of funds throughout a number of networks in what the agency described as a deliberate effort to complicate restoration. The dispersion occurred quick and throughout sufficient distinct channels to counsel the attacker or a coordinating get together had a pre-planned laundering route prepared earlier than the theft happened.
Of the whole stolen quantity, roughly $20 million sat in two Ethereum addresses transformed into DAI. The remaining funds moved in three separate instructions. Roughly $2.48 million was bridged to USDC on Arbitrum.
One other $2.47 million went to Hyperliquid throughout 19 separate accounts linked to Wagyu infrastructure, which the attacker then used to buy Monero (XMR) — a privacy-focused cryptocurrency particularly designed to make transaction tracing extraordinarily troublesome.
A further $1.1 million was bridged to the Bitcoin community by way of LiFi, and Arkham famous the likelihood that roughly 0.5 BTC was deposited right into a mixing service to additional obscure its origin.
The Monero conversion is probably the most telling aspect of the post-theft motion. Not like Bitcoin or Ethereum, Monero obscures sender addresses, recipient addresses, and transaction quantities concurrently, making blockchain forensics significantly much less efficient.
Blockchain safety agency PeckShield independently flagged the pockets exercise shortly after Sillytuna’s posts surfaced, confirming that roughly $24 million in belongings tied to the dealer’s accounts had been drained and transferred to an exterior deal with.
The impartial corroboration from two separate analytics platforms provides credibility to the on-chain portion of Sillytuna’s account, at the same time as regulation enforcement has but to talk publicly on the bodily assault itself.
TRACKING TODAY’S $24 MILLION CRYPTO THEFT
Sillytuna was focused in a real-world assault by thieves who stole $23.6M of AAVE USDC from him.
The attackers moved funds to layer 2 networks, Bitcoin, and even Monero. Right here’s a breakdown of the present fund places: https://t.co/PDPqmrvmnm pic.twitter.com/cBB3Ho55jY
— Arkham (@arkham) March 5, 2026
The incident suits inside a sample that the crypto trade has tracked with rising concern over current months. Violent assaults concentrating on crypto holders, social media influencers, and public figures with recognized digital asset positions have elevated, with perpetrators apparently calculating that bodily coercion bypasses the technical safety measures that shield wallets from distant exploitation.
The Sillytuna case combines a number of components that make restoration unlikely: a fast-moving attacker, a multi-network dispersal technique, deliberate conversion into privateness cash, and a possible mixing service deposit for the Bitcoin portion.
Every step within the chain provides friction for investigators and reduces the window throughout which intervention may intercept the funds. Whether or not the 10% bounty produces any outcomes is dependent upon whether or not somebody contained in the operation decides the reward outweighs the chance — a calculation that, in instances involving organized violence, hardly ever resolves within the sufferer’s favor.
