Radiant Capital

Forta

Tornado Cash

Read

Tornado

<div class="protos">
 <div>
  <div>
   <div>
    <p>There is growing concern about the number of crypto hackers using centralized exchanges to fund their attacks.</p>
    <p>In order to pay the transaction fees necessary to carry out attacks, hackers must first fund their wallets. However, given the transparency of a public ledger, they have to carefully consider how to do this without linking themselves to the crime.</p>
    <p>Tornado Cash used to be the industry standard for covering one’s tracks, used by hackers and privacy advocates alike.</p>
    <p>Now, it appears that in many cases, <a rel="noopener noreferrer nofollow" title="Hack" href="https://thebittimes.com/tag/hack.html">Hack</a>ers simply opt to skirt their way around <a rel="noopener noreferrer nofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a>s’ know-your-customer (KYC) procedures when funding their accounts.</p>
    <p>Blockchain monitoring firm Forta Network’s analysis of funding sources for recent attacks shows that the hacker’s favourite <strong>Tornado Cash now represents just under half the hacks studied</strong>, with funds coming from centralized exchanges (CEXs) in a third of cases.</p>
    <p>Other funding methods included novel privacy tool Railgun and ‘middleware operations software’ UnionChain, making up 6.7% apiece, as well as cross-chain swaps via Squid router, which accounts for 3.3%.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">Forta is always working to track down where hackers get their funds, in a recent analysis of 32 flash loan attacks you can see a snapshot of the funding threat landscape pic.twitter.com/ugdPmAWcsQ</p>— Forta (@FortaNetwork) February 6, 2024
      </blockquote>
     </div>
    </figure>
    <p><em>Read more: Explainer: What to know about crypto mixer Tornado Cash</em></p>
    <p>The dataset is made up of addresses used in 30 recent flash-loan attacks, including November’s intricate $48 million hack of decentralized exchange KyberSwap, back-to-back attacks on Arbitrum projects Radiant Capital and Gamma Strategies, and a thwarted <strong>$1 million governance attack on NFT project Loot</strong> last month.</p>
    <p>Although Tornado Cash remains the dominant source of funding for on-chain hacks, matters have been complicated for hackers trying to cash out after the US Treasury placed sanctions on the crypto mixing service in August 2022.</p>
    <p>After the sanctions, addresses that have touched any ‘tainted’ funds originating from the mixer are generally flagged by exchanges, making it a poor choice when needing to convert any ill-gotten gains to fiat currency.</p>
    <p>A recent article from 404 Media <strong>claims to have used a $15 AI-generated fake ID from a website named OnlyFake to pass KYC checks on OKX</strong>, the funding source of one of the <a rel="noopener noreferrer nofollow" title="attack" href="https://thebittimes.com/tag/attack.html">attack</a>s studied by Forta.</p>
    <p>With these AI tools, there is no need to purchase stolen credentials, or ‘fullz’ on the darknet, hackers can simply generate an entirely new person, and all their corresponding documentation.&nbsp;</p>
    <p>Such a significant proportion of attacks being exchange-funded shows just how easy bypassing KYC has become, a trend that is likely to continue with more widespread use of similar tools.</p>
    <figure class="wp-block-embed is-type-wp-embed is-provider-protos wp-block-embed-protos">
     <div class="wp-block-embed__wrapper">
      <blockquote class="wp-embedded-content" data-secret="07xyRpKR8a">
       Sources confirm Binance helps users avoid KYC/AML
      </blockquote><iframe class="wp-embedded-content" sandbox="allow-scripts" security="restricted" style="position: absolute; clip: rect(1px, 1px, 1px, 1px);" title="“Sources confirm Binance helps users avoid KYC/AML” — Protos" src="https://protos.com/sources-confirm-binance-helps-users-avoid-kyc-aml/embed/#?secret=VonXeWss8Z#?secret=07xyRpKR8a" data-secret="07xyRpKR8a" width="500" height="282" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe>
     </div>
    </figure>
    <p><em>Read more: Iranian <a rel="noopener noreferrer nofollow" title="crypto" href="https://thebittimes.com/tag/crypto.html">crypto</a> <a rel="noopener noreferrer nofollow" title="exchange" href="https://thebittimes.com/tag/exchange.html">exchange</a> Bit24 reportedly leaks 230,000 users’ KYC data</em></p>
    <p>Although the hackers run the risk of the CEX blocking their funds, they might feel somewhat safer leaving less of a trail on-chain.</p>
    <p>While dodging genuine KYC checks may present a problem to the crypto industry in on-ramping hackers, the problem is bound to affect many other industries. Ironically, the widespread use of cryptographic proofs, the technology underlying cryptocurrencies, may be the solution to these kinds of issues in the future.</p>
    <p>However, for now, there are reasonable doubts over how seriously exchanges take their role and how stringent KYC controls really are.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em>&nbsp;</p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/hackers-switching-to-centralized-exchanges-to-fund-crypto-attacks-tbt79319.html">https://thebittimes.com/hackers-switching-to-centralized-exchanges-to-fund-crypto-attacks-tbt79319.html</a></p>

Hackers switching to centralized exchanges to fund crypto attacks

TheBitTimes

Other articles published on Feb 8, 2024

Binance to Sell GOPAX Shares Amid Regulatory Hurdles in South Korea

SUI And Filecoin (FIL) Entice Investors At Current Prices, While Rebel Satoshi Presale Remains Pr...

Chinese Bitcoin miners find a new refuge in Ethiopia

Vast Bank set to shutdown its mobile app and exit the crypto space

Next Cryptocurrency to Explode Wednesday, February 8 – Hedera, Lido DAO, Cronos

BitTorrent Price Jumps Big! Will BTT Price Hold Its Gains Or Plunge?

Join our free newsletter for daily crypto updates!