Policy Event Β· High impact

Hinkal Exploit Funds Move Through Tornado Cash And THORChain

Security monitors reported that about $800,000 in USDC was taken from Hinkal and later routed through Tornado Cash and THORChain. The case highlights continuing AML exposure where privacy tools and cross-chain liquidity are used in post-exploit laundering paths.

High impact🌐 GlobalAMLDeFiEnforcementUSDCETHBTCHinkalTornado CashTHORChainCertiKPeckShield

APAC FINSTAB analysis

Although this is outside core APAC, it is relevant because global market-structure, enforcement, and stablecoin precedents often shape licensing expectations for APAC exchanges, issuers, custodians, and DeFi teams. Protocols/assets in scope: USDC, ETH, BTC. Named institutions or platforms: Hinkal, Tornado Cash, THORChain, CertiK, PeckShield. Teams should monitor the original source, map the change to licensing, custody, disclosure, and market-access obligations, and update their jurisdiction playbooks before the next compliance review.

Compliance read-through: map this event to entity licensing, market-access, custody, disclosure, token listing, and operational-risk obligations before expanding or marketing in the affected jurisdiction.

View related AML tracker page β†’

Related policy events