The attacker consolidated funds from two intermediary addresses through one wallet before depositing them into Tornado Cash.

verified span

“In its account of the transactions, the security firm described two streams of funds that passed through separate intermediary addresses before reaching one wallet.”