According to PANews, the individual known as ‘Lick’ has become central to a major theft investigation involving the unauthorized transfer of over $90 million from a U.S. government-seized cryptocurrency address. The case encompasses a series of coordinated robberies targeting multiple unidentified victims throughout November and December 2025.
Tracking the Money Trail: Lick’s Move to Tornado Cash
Recent blockchain monitoring indicates that Lick has begun systematically funneling stolen assets into Tornado Cash, a privacy-focused mixing protocol. To date, approximately 11,037 ETH has been deposited into the mixer service, suggesting an attempt to obscure the origin and ownership of the illicit funds. The move highlights a common tactic among cybercriminals seeking to launder cryptocurrency through mixing services.
Pattern of Escalating Thefts
The broader theft campaign attributed to Lick spans across November and December 2025, with investigations revealing multiple victims beyond the government-seized address. The systematic nature of these thefts, combined with the recent activity in Tornado Cash, points to coordinated criminal activity rather than isolated incidents.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
Notorious Crypto Thief 'Lick' Implicated in $90 Million Theft Spree, Deposits Funds Into Tornado Cash
According to PANews, the individual known as ‘Lick’ has become central to a major theft investigation involving the unauthorized transfer of over $90 million from a U.S. government-seized cryptocurrency address. The case encompasses a series of coordinated robberies targeting multiple unidentified victims throughout November and December 2025.
Tracking the Money Trail: Lick’s Move to Tornado Cash
Recent blockchain monitoring indicates that Lick has begun systematically funneling stolen assets into Tornado Cash, a privacy-focused mixing protocol. To date, approximately 11,037 ETH has been deposited into the mixer service, suggesting an attempt to obscure the origin and ownership of the illicit funds. The move highlights a common tactic among cybercriminals seeking to launder cryptocurrency through mixing services.
Pattern of Escalating Thefts
The broader theft campaign attributed to Lick spans across November and December 2025, with investigations revealing multiple victims beyond the government-seized address. The systematic nature of these thefts, combined with the recent activity in Tornado Cash, points to coordinated criminal activity rather than isolated incidents.