According to information from SlowMist District, LendHub, the Heco ecological cross-chain lending platform, is suspected to be attacked, and the main hacker profit address is 0x9d01..ab03. After the hacker received 100 ETH from Tornado Cash on January 12, he cross-chained part of the funds to the Heco chain to start the attack and made profits, and then used multiple platforms (such as Transit Swap, Multichain, Uniswap, Curve, and Optimism Bridge) to cross-chain or Convert stolen funds. So far, hackers have transferred 1100 ETH to Tornado Cash in 11 transactions. The specific reason for the attack is yet to be analyzed.