By relying on DeFi protocols meant for cross-chain transactions — moving from one blockchain to another — the hacker moved the anyEth to the Ethereum blockchain and then sent his funds to a decentralized exchange before using Tornado Cash to wash the funds.
These techniques have been becoming more popular in 2021. Last week, Crypto.com saw a major hack, and once again the Tornado Cash was used to shadow the transactions.