PeckShield said on Twitter that addresses starting with 0xb6B had been detected to make nearly $7 million in profits from the Nomad theft. Among them, the stolen 3.001 million USDT was traded into Ethereum through Uniswap and deposited into an address starting with 0xb6B. In addition, nearly 1.455 million USDC, 200 Ethereum and 100 WBTC were traded into Ethereum through four contracts. Through the address starting with 0xb6B or directly into Tornado Cash, partly into the Poolin mining pool. In addition, the address also provided funds to the address starting with 0xa5EF, which also stole about 200 Ethereum and 3 WBTC, and transferred them all to Tornado Cash after trading WBTC for Ethereum.