The same institutional entity has been hit for the second time this month. About 973K MORPHO was drained from two addresses linked to the entity a few hours ago, and the stolen tokens were deposited into Tornado Cash.

On October 9, roughly $3.5M in claims from old bridges was stolen from the same 0x4943 address. Those funds were bridged from Ethereum to Zcash via Near Intents and shielded into the Ironwood pool.

Combined losses across the two incidents now stand at about $5.8M in under two weeks.

Both thefts involved EIP-7702 delegation transactions, which let an externally owned wallet run smart contract code. The 0x4943 address also shows onchain overlap with a wallet suspected to belong to Nima Capital, a family office that reportedly lost eight figures to a private key compromise in September 2023.