On November 15th (UTC+8), according to on-chain analyst Ember Monitoring, the Balancer hacker, after exchanging $ETH LST tokens and other non-ETH tokens for $ETH, began to launder and transfer $ETH through Tornado: In the past 1 hour, 2,000 $ETH ($6.36M) was deposited into Tornado.
Transferring the stolen assets through Tornado basically means that the hacker has given up on returning the assets to Balancer and receiving a white hat bounty.[ChainCatcher]