According to CoinMeta, analyst Kaden pointed out that among the 19 Metamask validators, the block rewards of 18 were transferred to an address (0x98b9…24a3) funded by Tornado Cash. The attacker stole approximately 0.36 ETH. Currently, about 17,000 validators have voluntarily withdrawn, involving around 523,000 ETH. Kaden stated that it is still unclear whether the attacker has the capability to modify all fee reception addresses.