Ethereum

Bitcoin

<div class="sg-post-des">
 The still-unidentified FTX hackers started ramping up their movement of stolen funds in recent weeks, potentially using media attention of the trial as a cover to hide the illicit activity.
</div>
<div class="cointelegraph">
 The <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> responsible for stealing over $400 million from FTX and FTX US in November could be using the hype around Sam Bankman-Fried’s fraud <a rel="noopener noreferrer nofollow" title="trial" href="https://thebittimes.com/tag/trial.html">trial</a> to further obfuscate the funds, says CertiK’s director of security operations Hugh Brooks.
 Only days before the start of Bankman-Fried's criminal trial, the FTX hacker, known as “FTX Drainer," began&nbsp;moving millions in Ether&nbsp;it had gained from the November attack.
 The movements have continued throughout the trial. In the last three days, the hacker transferred approximately 15,000 ETH (worth roughly $24 million) to three new wallet addresses.
 “With the onset of the FTX trial and the substantial public attention and media coverage it is receiving, the individual accountable for draining the funds might be feeling an increased urgency to conceal the assets,” said Brooks.
 <blockquote>
 “It's also plausible that the FTX drainer harbored an assumption that the trial would monopolize so much attention from the Web3 industry that there would be insufficient bandwidth to trace all stolen funds while also covering the trial concurrently.”
 </blockquote>
 FTX, which had once been valued at $32 billion, declared bankruptcy on Nov. 11. That same day, employees at FTX began noticing massive withdrawals of funds from the exchange’s wallets.
 An Oct. 9 report from Wired has provided fresh insight into how events transpired during the night of the attack.
 After FTX employees realized that the attacker had complete access to a series of wallets, the team declared that "the fox [was] in the hen house” and scrambled to keep the remaining funds out of the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a>’s hands.
 The team reportedly made the decision to transfer a staggering amount of the remaining funds — between $400 and $500 million — to a privately owned Ledger cold wallet, while waiting to hear back from BitGo, the company tasked with taking custody of the exchange’s assets post-bankruptcy.
 The move likely prevented the attacker from gaining a full $1 billion in the raid.
 Related: FTX hacker’s wallet stirs as Ethereum ETFs prepare for US debut
 Meanwhile, Brooks explained that the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> appears to have changed its method for obscuring funds.
 On Nov. 21, the FTX hacker was observed attempting to launder funds by using a “peel chain” method, which involves sending decreasing amounts of funds to new wallets and “peeling” off smaller amounts to new wallets.
 However, the <a rel="noopener noreferrer nofollow" title="hacker" href="https://thebittimes.com/tag/hacker.html">hacker</a> has recently been using a more sophisticated method to obscure the transfer of the illicit assets, said Brooks.
 <figure><img src="https://cdn.thebittimes.com/images/2023/10/10/b359fac18ea0d70c3797ffe316bc27db.webp">
 <figcaption style="text-align: center;">The new laundering method being employed by the FTX hacker as recorded on Oct. 2. Source: CertiK
 </figcaption>
 </figure>
 The funds stored in the original Bitcoin wallet are distributed through multiple wallets, transferring smaller divisions of funds to a series of additional wallets, a tactic that “considerably prolongs” the tracing process.
 Brooks said they have yet to identify any individuals or groups that could be behind the FTX hack, and that investigations are continuing.
 Magazine: Blockchain detectives — Mt. Gox collapse saw birth of Chainalysis
 <template data-name="subscription_form" data-type="crypto_biz"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/ftx-hacker-could-be-using-sbf-trial-as-a-smokescreen-certik-tbt65714.html">https://thebittimes.com/ftx-hacker-could-be-using-sbf-trial-as-a-smokescreen-certik-tbt65714.html</a>

FTX hacker could be using SBF trial as a smokescreen: CertiK

TheBitTimes

Other articles published on Oct 10, 2023

Israeli police seize crypto accounts linked to Hamas financing

See the Provocative AI Show That Turns A Critical Eye on the Tool’s Promise

SwapinBuy Lets Customers Buy, Sell Or Pay With Crypto Easily

3Commas on High Alert After Security Breach Leads to Unauthorized Trades

Elon Musk in Trouble After Trying to Avoid SEC Subpoena

Brazil’s CVM to pioneer tokenization use cases in 2024 regulatory sandbox

Join our free newsletter for daily crypto updates!