Step 2. Hiding funds
Roughly speaking, we stole 1 million dollars and all the tokens on our address are ETH. For cashing out, we will use method 3, since the first method is too simple, and the second is too unreliable.
Next, with the help of scripts, we generate 1000 addresses for ourselves. Deployment in the Ethereum network is not required, so in just a couple of clicks we will get 1000 different public keys.
Also, we are creating another 1115 addresses for further use.
We will distribute the entire stolen million to all addresses, so, taking into account commissions, we will end up with an unequal amount of money at each address. Remember about heuristics, so we make addresses with amounts less than $1000 in any range, for example $850, $944, $956. Often, transaction monitoring is interesting to any crypto company, and in most cases, monitoring begins if the ongoing transactions exceed $1000. That is why, in order not to catch the eye, we take into account this factor.
Let's do the rough math.
$1,000 for each of 1,000 addresses (excluding fees). Further, with each address, we go to the mixer, for example, Tornado Cash and ask him to withdraw all our funds to unused 1115 addresses with one condition - the amounts must be different. Thus, we will receive on the “clean” addresses the amounts: