On June 1, someone with a stolen admin key minted 99 million TSR tokens out of nothing, dumped them on PancakeSwap for about $2.4 million, and had most of it moving through Tornado Cash before the project said a word in public. If you advise clients on crypto recovery, the temptation is to file a case like this under “mixer, untraceable, closed.” That read is wrong, and it costs clients money. The recoverable evidence in TesseraDAO sits in the hours between the mint and the first Tornado deposit, and that window stays open longer than most people assume.
What happened
TesseraDAO runs the TSR token on BNB Chain. At 11:38 UTC on June 1, an attacker used a compromised admin private key to take ownership of the core contract and mint roughly 99 million fresh TSR. No exploit of contract logic, no flash loan, no oracle trick. Just a key that should have been in cold storage and wasn’t.
The attacker swapped the entire mint into stablecoins through the TSR liquidity on PancakeSwap, pulling out around $2.4 million in USDT. TSR’s price fell about 99% in the process, which is what happens when you sell 99 million unbacked tokens into a pool that was never sized for them. Holders who did nothing wrong woke up to a token worth almost zero.
From there the funds left BNB Chain. The attacker used cross-chain bridges to move the proceeds into Ethereum, converted to ETH, and began depositing into Tornado Cash. On-chain analyst Specter flagged the incident and identified the attacker’s address, by which point 1,285.5 ETH had already gone through the mixer. The whole sequence, mint to mixer, ran roughly 19 hours before public disclosure.
The forensic angle
A private key compromise that ends in Tornado Cash leaves a cleaner trail than a clever contract exploit does, and that’s the part recovery teams underuse. Every step before the mixer is fully attributable and timestamped on a public ledger. The mint transaction names the contract and the controlling address. The PancakeSwap swaps show exact amounts and counterparties. The bridge hop from BNB Chain to Ethereum is a discrete event with an entry transaction, a bridge contract, and an exit transaction, and bridges are one of the few points where an off-chain entity sits in the middle of the flow.
Tornado Cash breaks the direct on-chain link between deposit and withdrawal. It does not erase everything around the deposit. Deposit timing, amount patterns, the gas-funding source for the attacker’s wallets, and the behavior on the withdrawal side all remain analyzable. When 1,285.5 ETH goes in over a compressed window, the deposits themselves become a fingerprint. Recovery work on a case like this is about reconstructing the full pre-mixer chain into court-admissible form, then using deposit and withdrawal timing analysis to narrow the set of candidate exit addresses, and getting freeze requests to the bridge and any centralized off-ramp before the attacker cashes out the laundered ETH.
This is work our investigators have done. After the December 2024 1inch exploit, our team traced roughly 545 ETH, about $2.2 million, through Tornado Cash by analyzing 6,231 mixer withdrawals and isolating the one cross-chain behavioral fingerprint that matched the stolen amount. Standard analytics stopped at the mixer. Behavioral profiling across chains carried the attribution through it and pointed to identifiable service providers on the exit side. Not every mixed trail can be followed that far, and we don’t claim otherwise. A Tornado Cash deposit should open a forensic question before anyone closes the file.
The enemy here is the 19-hour gap. Funds that move from a public dump to a sanctioned mixer in under a day mean the practical freeze window is measured in hours, not days. The trail is durable. The chance to act on it is not.
Who this hits
Two groups carry the loss. The first is every TSR holder who got diluted to nothing by a mint they had no part in and no warning about. For them, the asset is the token, and the realistic question is whether the project compensates or whether there’s a civil path against an identifiable attacker. The second is the lawyer or recovery professional who picks up that client and has to decide, fast, whether the case is worth building. Tornado Cash in the transaction history works as a checkpoint in the flow, and the work before it is what determines whether anything downstream is recoverable.
What it means for recovery lawyers
Treat the appearance of Tornado Cash as the start of the forensic question, not the end of it. The value of a case like TesseraDAO lives in three things you can actually act on. First, the pre-mixer chain is complete and provable: the stolen-key mint, the DEX dump, the bridge transfer, each with on-chain evidence that supports both attribution and a clear damages figure. Second, the bridge hop and any centralized exit are chokepoints where a freeze request, sent quickly with documentation that holds up, can still catch funds. Third, mixer deposit timing and the funding trail of the attacker’s wallets give you investigative leads that survive even when the direct deposit-to-withdrawal link is severed.
The operational lesson is speed. The reason most of these cases fail isn’t that the chain goes cold, it’s that the response starts after the disclosure lag has already closed the freeze window. A client who comes to you on day three has a very different case than one who comes to you in hour three. Build the intake and the forensic reconstruction to run in parallel from the first hour, line up the freeze channels before you need them, and document the trail to evidentiary standard as you go rather than after the fact. The TesseraDAO trail is recoverable as a matter of forensics. Whether it’s recoverable in practice depends on how fast someone moves on it.
Sources
- Hacker Drains $2.4 Million From TesseraDAO Through Unauthorized TSR Minting (UseTheBitcoin)
- TesseraDAO TSR Token Crashes 99% Following 99M Token Mint Exploit (Crypto Times)
- Exploit hits Gnosis Pay, TesseraDAO loses $2.5M as June hacks start to climb (Cryptopolitan)
- PeckShield Says TesseraDAO Exploit Minted 99 Million TSR, Stole 2.5 Million USDT (Bloomingbit)
- TesseraDAO incident entry (SlowMist Hacked)
If your platform or users have been affected by recent exploits, immediate forensic intervention is critical to tracing and freezing assets before they reach obfuscation services.
