Blockchain analytics firm Peckshield reports that hackers stole around $950k worth of crypto utilizing the Ethereum vanity address generated by the Profanity tool. Address 0x9731F stole the crypto from a virtual address and since then has transferred 732 ETH to the now-sanctioned Tornado Cash mixer.
Profanity is an open-source tool for creating numerous addresses, as well as an internal tool for creating addresses with multiple leading zeros.
This exploit comes after a week in which hackers stole $160 million from crypto firm Wintermute. A bug in Profanity similarly enabled the Wintermute hack and CEO Evgeny Gaevoy now has offered a 10% bounty to the hacker.