2024

Ronin

Axie Infinity

Tornado

Two crypto wallet addresses belonging to Jeff “Jihoz” Zirlin, one of the five co-founders of Axie Infinity and Ronin Network, were hacked, and roughly $9.7 million worth of Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>) was stolen and siphoned across Tornado Cash.&nbsp;
On Feb. 23, blockchain investigator PeckShield alerted about a “whale wallet” compromise over the Ronin Bridge, reporting that the hacker made away with 3,248 ETH. Aleksander Larsen, co-founder of Ronin Network, immediately <a href="https://twitter.com/Psycheout86/status/1760837760179380279" target="_blank" rel="noopener nofollow">responded</a> that “the (Ronin) bridge itself has top security” and suspected a wallet hack instead. 
<blockquote class="twitter-tweet">
 <a href="https://twitter.com/hashtag/PeckShieldAlert?src=hash&amp;ref_src=twsrc%5Etfw">#PeckShieldAlert</a> It appears a whale wallet has been compromised, &amp; ~3,248 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$ETH</a> (worth ~$9.7m) from the <a href="https://twitter.com/hashtag/Ronin?src=hash&amp;ref_src=twsrc%5Etfw">#Ronin</a> Bridge was withdrawn and transferred to <a href="https://twitter.com/hashtag/TornadoCash?src=hash&amp;ref_src=twsrc%5Etfw">#TornadoCash</a> <a href="https://t.co/sRK36BQFDu">pic.twitter.com/sRK36BQFDu</a>— PeckShieldAlert (@PeckShieldAlert) <a href="https://twitter.com/PeckShieldAlert/status/1760843091916042439?ref_src=twsrc%5Etfw">February 23, 2024</a>
</blockquote> 
Larsen also highlighted that the Ronin Bridge had been audited and is designed to pause if an unusually large withdrawal is detected. Soon after, Zirlin confirmed that two of his personal wallets had been hacked. He said the attack was not due to vulnerabilities within the Ronin chain or Sky Mavis operations, adding:
<blockquote data-ct-non-breakable="true">
 “I want to assure everyone that we have strict security measures in place for all chain-related activities.”
</blockquote>
Speaking to Cointelegraph, PeckShield said that the root cause of the hack was a “wallet compromise,” which allowed the unauthorized outbound transfer of funds.
<blockquote class="twitter-tweet">
 This has been a tough morning for me.&nbsp; Two of my addresses have been compromised. The attack is limited to my personal accounts, and has nothing to do with validation or operations of the Ronin chain. Additionally, the leaked keys have nothing to do with Sky Mavis operations.…— Jihoz.ron (@Jihoz_Axie) <a href="https://twitter.com/Jihoz_Axie/status/1760845078757511562?ref_src=twsrc%5Etfw">February 23, 2024</a>
</blockquote> 
While no particular details were shared about the events that led to the hack, Zirlin’s message suggests that the private keys of the two wallets were leaked, which led to unauthorized access to his personal crypto wallets.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-02/cfa3c1b8-9645-4fb7-b6a9-d8857824700c.jpg" alt="" title="">
 <figcaption style="text-align: center;">
 Funds stolen from Axie Infinity’s Jihoz were transferred to Tornado Cash. Source: PeckShield
 </figcaption>
</figure>
PeckShield’s investigation of the compromised wallets from Ronin Bridge v2 suggests that the 3,248-ETH loot was initially split and moved to three different wallets. The funds eventually made their way into Tornado Cash, a service often used by hackers to anonymize the funds’ ownership and traceability. 
Related: <a href="https://cointelegraph.com/news/coordinated-crypto-investor-phishing-campaign-email-alert">Coordinated crypto hack and phishing campaign floods investor emails: Alert</a>
On Feb. 1, Binance froze $4.2 million worth of stolen XRP (<a href="https://cointelegraph.com/xrp-price-index">XRP</a>), a part of the $112-million hack on Ripple co-founder Chris Larsen’s personal wallet from Jan. 31.
<blockquote class="twitter-tweet">
 After finding out early on about the exploit that occurred at <a href="https://twitter.com/Ripple?ref_src=twsrc%5Etfw">@Ripple</a>, we’re happy to say that the <a href="https://twitter.com/hashtag/Binance?src=hash&amp;ref_src=twsrc%5Etfw">#Binance</a> team has managed to freeze $4.2 Million worth of <a href="https://twitter.com/search?q=%24XRP&amp;src=ctag&amp;ref_src=twsrc%5Etfw">$XRP</a> stolen by the exploiter. We appreciate both the communities efforts in flagging it to exchanges - as always <a href="https://twitter.com/zachxbt?ref_src=twsrc%5Etfw">@zachxbt</a>…— Richard Teng (@_RichardTeng) <a href="https://twitter.com/_RichardTeng/status/1753100751713517903?ref_src=twsrc%5Etfw">February 1, 2024</a>
</blockquote> 
Unlike Axie Infinity’s Jihoz hacker, Larsen’s hacker didn’t use crypto mixer services or decentralized exchanges to hide their identity. As a result, Binance was able to track down some of the funds and block them from the hacker’s access.
Magazine: <a href="https://cointelegraph.com/magazine/crypto-city-guide-perth-cointelegraph-magazine/">Wealthy, isolated, and incredible beaches: Perth Crypto City Guide</a>

Axie Infinity co-founder loses $9.7M in 3,248-ETH wallet hack

Cointelegraph

Other articles published on Feb 23, 2024

Lumerin Partners with Portal DEX for Revolutionary Decentralized Bitcoin Mining and Hashpower Tra...

StarkWare Adjusts Token Unlocking Schedule Following Community Feedback

Exploring Top Altcoins for Upcoming Week’s Investment Decisions

Siacoin Price Prediction 2024 – Is $SC Worth Buying, or Is $SMOG the Best Alternative?

Solana-Based MOBILE Altcoin Project Drops Over 10% After Going Live on Coinbase

Worldcoin hits $1b market cap as OpenAI, NVIDIA unleash bullish catalysts

Join our free newsletter for daily crypto updates!