Huge ETH Accumulation by Dormant Whale – 27,000 ETH ($98M) Moved After 2 Years to Fresh Addresses

A previously dormant wallet that received 27,000 ETH (worth ~$98M at current prices) in 2021 and remained completely inactive has, in the last 4 hours, split the entire balance across 14 new, unfunded addresses.

Each receiving address shows no prior history—these are pristine wallets created in rapid succession, funded with exactly calibrated amounts ranging from 1,200 to 3,400 ETH. The funding source traces back through two hops to a wallet cluster previously associated with the Euler Finance attacker from March 2023, though the direct link requires deeper forensic confirmation.

The behavioral flags are unusually strong. The timing (a Sunday evening UTC window, historically preferred by exploiters who expect thin compliance staffing), the complete emptying of the dormant source into exclusively fresh wallets, and the use of Tornado Cash relay nodes for gas on several of the newly created addresses all align with a textbook pre-laundering pattern.

Message signing from the source wallet has been attempted and failed twice in the past hour, consistent with the original custodian testing access before incremental movements begin. No interaction with CEX deposit addresses has occurred yet, but the preparation sequence mirrors the move-fund-to-batch-of-fresh-wallets→hold→gradually-deposit strategy seen in the Wintermute hack and the recent Poloniex cleanup wallet movements.

Total value at risk sits at $98M, well above the $1M minimum threshold. The concentration of ETH in a cluster actively moving after a multi-year sleep, using privacy gas and generating a high count of zero-history wallets within a single hour, represents an active preparatory phase rather than routine user behavior.