Posted 9/15/2023, 10:21:14 PM

North Korean Hackers Lazarus Stole $240M in Crypto in 104 Days Through Major Exchange Hacks

North Korean hacking group Lazarus has stolen $240M in crypto over the past 104 days, according to blockchain surveillance firm Elliptic.
Elliptic links Lazarus to 5 major crypto hacks recently, including the $54M hack of CoinEx this week.
Lazarus hackers mixed stolen funds with addresses used in previous hacks of Stake and Atomic Wallet.
Elliptic agrees Lazarus should be suspected for the CoinEx hack based on blockchain activity analysis.
Lazarus appears to be targeting centralized platforms over decentralized ones, possibly due to easier social engineering.

decrypt.co

Relevant topic timeline:

8/1/2023

Curve Finance’s $62M exploit exposes larger issues for DeFi ecosystem

Main topic: Hackers stole $62 million from Curve Finance, raising concerns about the strength of the decentralized finance ecosystem. Key points: 1. Curve Finance is one of the largest decentralized exchanges (DEX) with $1.67 billion in total value locked (TVL). 2. Several DeFi projects' pools were also hacked, resulting in significant losses. 3. The hack was caused by a bug in older versions of the Vyper compiler contract programming language. 4. The hack represents about 4% of Curve's TVL, but a white hat hacker returned $5.4 million to Curve. 5. The hack highlights ongoing challenges and vulnerabilities in the crypto space.

8/23/2023

FBI Says North Korean Hackers May Try to Sell $40M of Bitcoin

North Korean hackers, including the Lazarus Group and APT38, are believed to be planning to cash out stolen bitcoin worth over $40 million, according to the FBI.

8/24/2023

Bitcoin miner gets life in prison, China offers bounties for crypto firms: Asia Express

A Hong Kong crypto exchange, HashKey, will begin retail trading on August 28, allowing residents to invest up to 30% of their net worth into cryptocurrencies with a warning if the limit is exceeded; meanwhile, China is cracking down on private blockchain firms, arresting crypto executives and seizing assets, and the FBI has traced down $41 million in Bitcoin stolen by North Korean hackers from various projects.

9/4/2023

Crypto gambling site Stake sees $16M withdrawn in possible hack

An alleged hacker made suspicious withdrawals totaling $16 million from the crypto gambling site Stake.com, raising concerns about stolen funds and the security of crypto gambling platforms.

9/11/2023

Hackers Drain $691K in NFTs After Hijacking Vitalik Buterin's Twitter Account

Hackers stole over $691,000 from Ethereum founder Vitalik Buterin's followers by posting a malicious phishing link that provided access to their wallets, with the majority of the stolen value being non-fungible tokens (NFTs).

9/12/2023

Hackers Behind Stake's $41M Hack Bridge Another $328K to Bitcoin and Avalanche

Hackers behind the $41 million hack of cryptocurrency casino Stake have moved an additional $328,000 million worth of Polygon and BNB tokens to the Avalanche blockchain, bringing the total transferred funds to $4.8 million, representing 1.2% of the total stolen amount.

9/16/2023

North Korea Using Russian Crypto Exchanges to Launder Billions in Stolen Crypto Funds: Report

Hackers from North Korea are using Russian crypto exchanges known for money laundering to transfer stolen digital assets, according to market intelligence firm Chainalysis. The firm's on-chain data reveals that hacking groups linked to North Korea are increasingly using Russian exchanges to launder funds stolen from decentralized app project Harmony (ONE), with evidence showing that DPRK entities have been using Russian services for money laundering since 2021.

9/19/2023

CoinEx Loses $70M in Hot Wallet Hack, Aims to Resume Withdrawals Within 7 Days

Hong Kong-based cryptocurrency exchange CoinEx has confirmed that compromised private keys allowed hackers to steal over $70 million worth of tokens, and is working on rebuilding its wallet system to restore functionality and compensate affected users.