Recalled a still astounded Hosp: “For some weird reason, he was quite well aware of what was happening…He understood more of the DAO hack when I asked him what had happened…than I had found on the internet or anywhere.”
At this point, the attacker used a Wasabi wallet, which mixes many transactions together in order to obscure the funds flow in a process called a CoinJoin. It was thought that the bitcoins spit out on the other side of a CoinJoin were impossible to trace back.
While at that time, it may have been sufficient to turn the trail cold, with this news, Chainalysis is disclosing for the first time that it is able to de-mix such transactions.
When the attacker used Wasabi, they must have felt that their bitcoins had been sufficiently laundered. However, that was no longer true once Chainalysis’s technology improved over time.
Who Was Behind the 2016 DAO Attack on Ethereum? The Backstory to My Investigation https://laurashin.bulletin.com/who-was-behind-the-2016-dao-attack-on-ethereum-the-backstory-to-my-investigation

In the end, my years-long effort unspooled in a few weeks. I feel confident about the evidence, which my sources also felt was extremely strong. Once we had everything, they marveled: "The evidence is never this good."
Who Hacked the DAO on Ethereum? Here’s How We Jumped Past One Critical Step https://medium.com/@laurashin/who-hacked-the-dao-on-ethereum-heres-how-we-jumped-past-one-critical-step-60aec489a127
reply
In her investigation, Laura alleges that the DAO hacker is Toby Hoenisch, ex-CEO of a failed ICO TenX.
Seems to have messed up by using his IP address without VPN and his username for his lightning and grin nodes. Wild if true
reply