Kronos Research was exploited for $25 million in November last year, and one of the six wallets linked to the hacker started moving funds to Tornado Cash on May 7.
Source: https://cointelegraph.com/news/kronos-research-hacker-funds-tornado-cash-exploit
